PT-2024-35522 · Linux+6 · Linux Kernel+6

Published

2024-10-23

·

Updated

2026-05-26

·

CVE-2024-53056

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential NULL dereference issue has been identified in the Linux kernel, specifically in the mtk crtc destroy() function. This issue arises when the mbox request channel() call fails in mtk crtc create(), resulting in the mtk crtc->cmdq client.chan pointer being set to NULL. If cmdq pkt create() is not called, then cmdq pkt destroy() should not be called to avoid a NULL pointer dereference.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-17211
ALT-PU-2025-12647
AZL-53852
BDU:2025-15099
CVE-2024-53056
ECHO-5797-387B-40EA
OESA-2025-1110
OESA-2025-1111
OPENSUSE-SU-2024_4314-1
OPENSUSE-SU-2024_4316-1
OPENSUSE-SU-2025_0201-1
OPENSUSE-SU-2025_0229-1
SUSE-SU-2024:4314-1
SUSE-SU-2024:4316-1
SUSE-SU-2024:4318-1
SUSE-SU-2025:0201-1
SUSE-SU-2025:0201-2
SUSE-SU-2025:0229-1
SUSE-SU-2025:0289-1
SUSE-SU-2025:20163-1
SUSE-SU-2025:20164-1
SUSE-SU-2025:20246-1
SUSE-SU-2025:20247-1
SUSE-SU-2025_0201-1
SUSE-SU-2025_0201-2
USN-7276-1
USN-7277-1
USN-7310-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu