PT-2025-3323 · Linux+7 · Linux Kernel+7

Published 2025-01-08 · Updated 2026-03-14 · CVE-2024-56776

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the drm/sti component. The issue involves a potential dereference of error pointers, specifically with the crtc state pointer. The return value of drm atomic get crtc state() needs to be checked to avoid using the error pointer in case of failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-476

CWE-754

Related Identifiers

ALT-PU-2024-17893

ALT-PU-2025-12647

AZL-55339

AZL-55340

BDU:2025-05077

CVE-2024-56776

DLA-4076-1

OPENSUSE-SU-2025_0428-1

OPENSUSE-SU-2025_0499-1

OPENSUSE-SU-2025_0556-1

OPENSUSE-SU-2025_0557-1

OPENSUSE-SU-2025_0577-1

SUSE-SU-2025:0289-1

SUSE-SU-2025:0428-1

SUSE-SU-2025:0499-1

SUSE-SU-2025:0556-1

SUSE-SU-2025:0557-1

SUSE-SU-2025:0577-1

SUSE-SU-2025:0577-2

SUSE-SU-2025:20165-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20248-1

SUSE-SU-2025:20249-1

SUSE-SU-2025_0428-1

SUSE-SU-2025_0499-1

SUSE-SU-2025_0557-1

SUSE-SU-2025_0577-1

SUSE-SU-2025_0577-2

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

USN-7387-1

USN-7387-2

USN-7387-3

USN-7388-1

USN-7389-1

USN-7390-1

USN-7407-1

USN-7421-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7458-1

USN-7459-1

USN-7459-2

USN-7468-1

USN-7523-1

USN-7524-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2532

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56776.json · Exploit
• https://ubuntu.com/security/CVE-2024-49968 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7388-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50234 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50056 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49903 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-55916 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47749 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7407-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50031 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47141 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56620 · Vendor Advisory
• https://git.kernel.org/stable/c/e98ff67f5a68114804607de549c2350d27628fc7 · Patch
• https://ubuntu.com/security/CVE-2024-56701 · Vendor Advisory