PT-2024-36882 · Linux+7 · Linux Kernel+7
Alexander Shiyan
·
Published
2024-12-27
·
Updated
2025-10-03
·
CVE-2024-56576
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 6.11.0
Description
A crash can occur in the Linux kernel when using polling in the probe error path of the tc358743 i2c driver. If an error occurs in the
probe() function, the polling timer that was alarmed earlier should be removed to prevent the timer from being called with arguments that are already freed, resulting in a crash. The issue is related to the run timers() function and can cause a crash with a warning message indicating a CPU error.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the crash in the probe error path when using polling.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu