CVE-2024-56754

Summary

CVE-2024-56754 is a vulnerability affecting the Linux kernel's crypto module. Specifically, in the caam subsystem, an issue was identified where the last parameter passed to devm_add_action_or_reset() is incorrectly casted. Instead of the expected "struct device *", the code uses "struct caam_drv_private *". Consequently, resources are not released properly during caam_qi_shutdown(). This vulnerability could potentially lead to resource leaks and other unintended consequences. The issue has been resolved by correcting the casting error in the Linux kernel.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.