PT-2024-36998 · Linux+3 · Linux Kernel+3

Published

2024-11-05

·

Updated

2025-10-03

·

CVE-2024-56689

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer dereference issue has been resolved in the Linux kernel. The issue occurs when the platform get resource byname() function fails and returns NULL because the Device Tree (DT) lacks an 'mmio' property for the MHI endpoint. This causes a NULL pointer access when dereferencing res->start. A check has been added to prevent this issue.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-17893
ALT-PU-2025-12647
AZL-55153
BDU:2025-07852
CVE-2024-56689
OESA-2025-1286
OESA-2025-1450
USN-7276-1
USN-7277-1
USN-7310-1
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7468-1
USN-7523-1
USN-7524-1

Affected Products

Alt Linux
Linuxmint
Linux Kernel
Ubuntu