CVE-2024-56767

Summary

CVE-2024-56767 is a vulnerability affecting the Linux kernel's dmaengine component, specifically the at_xdmac subsystem. This issue arises due to the potential return of a NULL pointer from the at_xdmac_memset_create_desc function. If this occurs, for example, when the input length is incorrect or the free descriptor list is empty and memory is insufficient, a null pointer dereference can take place, potentially leading to system instability or crashes. To mitigate this risk, the Linux kernel team has introduced checks to prevent such null pointer dereferences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.