CVE-2024-56773

Summary

CVE-2024-56773 is a newly identified vulnerability in the Linux kernel. This issue lies in the kunit testing framework, specifically in the function kunit_device_driver_test(). The function kunit_kzalloc() used in this function has been found to return a NULL pointer under certain conditions. If this NULL pointer is dereferenced without proper checking, it may result in a NULL dereference, potentially leading to unintended system behavior or crashes. The vulnerability has been addressed by adding a NULL check for test_state to prevent such dereferencing.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.