PT-2024-21542 · Linux · Linux Kernel

Published 2024-04-17 · Updated 2024-04-18 · CVE-2024-26867

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.3-x86 64 #1

Description A vulnerability in the Linux kernel has been resolved, specifically in the comedi 8255 module. The refactoring done in commit 5c57b1ccecc7 removed the logic and flag that initialized the io field in the struct subdev 8255 private, leading to a NULL pointer dereference. This bug causes a kernel NULL pointer dereference, address: 0000000000000000, and results in a system crash.

Recommendations To resolve this issue, update the Linux kernel to a version later than 6.7.3-x86 64 #1. As a temporary workaround, consider disabling the subdev 8255 init() function until a patch is available. Restrict access to the vulnerable module comedi 8255 to minimize the risk of exploitation. Avoid using the subdev 8255 mmio and subdev 8255 io callbacks in the affected API endpoint until the issue is resolved.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2024-26867

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26867.json · Exploit
• https://cve.org/CVERecord?id=CVE-2024-26867 · Security Note
• https://osv.dev/vulnerability/CVE-2024-26867 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-26867 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26867 · Vendor Advisory
• https://git.kernel.org/stable/c/cfa9ba1ae0bef0681833a22d326174fe633caab5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-26867 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26867 · Vendor Advisory
• https://git.kernel.org/stable/c/4a825457a45d8debc46ab8cba57d47462411710d · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-26867 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26867 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://docs.bell-sw.com/security/cves/CVE-2024-26867 · Note
• https://twitter.com/CVEnew/status/1780651989434618064 · Twitter Post
• https://git.kernel.org/linus/cfa9ba1ae0bef0681833a22d326174fe633caab5 · Note