CVE-2024-56772

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 8, 2025
Updated: Feb 10, 2025
CWE ID 416

Summary

[1] CVE-2024-56772 is a use-after-free (UAF) bug discovered in the Linux kernel's kunit module. In the function kunit_init_suite(), if an allocation fails during the creation of a test suite, the suite's log stream memory is freed but not set to NULL. Consequently, the subsequent call to string_stream_clear() causes a UAF, resulting in a kernel panic. This vulnerability may allow attackers to execute arbitrary code or cause a denial-of-service condition. The affected versions of the Linux kernel are not specified in the provided information.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share