CVE-2024-56769
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jan 6, 2025
Updated: Jan 9, 2025
CWE ID 908
Summary
CVE-2024-56769 is a vulnerability affecting the Linux kernel's media driver, specifically the dib3000mb module. Syzkaller discovered an uninitialized value issue in the function dib3000_read_reg(), where a local buffer rb is used in i2c_transfer() without proper initialization. If the i2c transfer fails, rb may contain undefined values, leading to potential security vulnerabilities. To mitigate this problem, the affected code has been updated to zero out the rb buffer before use in dib3000_write_reg().
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.