PT-2025-3320 · Linux+2 · Linux Kernel+2

Zichen Xie

·

Published

2024-11-19

·

Updated

2025-05-26

·

CVE-2024-56773

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential null dereference vulnerability has been resolved in the Linux kernel's kunit module. The issue occurs in the kunit device driver test() function, where kunit kzalloc() may return a NULL pointer. If this pointer is dereferenced without a NULL check, it can lead to a null dereference. To fix this, a NULL check has been added for test state.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-15317
CVE-2024-56773
USN-7379-1
USN-7379-2
USN-7380-1
USN-7381-1
USN-7382-1
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7468-1
USN-7523-1
USN-7524-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu