PT-2024-32182 · Linux+3 · Linux Kernel+3

Published 2024-09-02 · Updated 2025-02-10 · CVE-2024-46768

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52

Description The issue arises when the BIOS returns no event data in response to a WMI event, resulting in a NULL ACPI object being passed to the WMI notify handler. To address this, a check has been implemented to ignore the event when no data is returned.

Recommendations For versions prior to 6.6.52, update to version 6.6.52 or later to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

CWE-388

Related Identifiers

BDU:2025-01675

CVE-2024-46768

MGASA-2024-0316

MGASA-2024-0318

OESA-2024-2219

USN-7154-1

USN-7154-2

USN-7155-1

USN-7156-1

USN-7196-1

Affected Products

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 722

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46768.json · Exploit
• https://ubuntu.com/security/CVE-2024-41079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46753 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46756 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-44949 · Security Note
• https://ubuntu.com/security/CVE-2024-53057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46797 · Security Note
• https://ubuntu.com/security/CVE-2024-42295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46795 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46815 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46825 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42238 · Vendor Advisory