PT-2025-3329 · Linux+4 · Linux Kernel+4

Published

2024-11-12

·

Updated

2026-05-26

·

CVE-2024-56782

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability in the Linux kernel has been resolved by adding a NULL check to acpi quirk skip serdev enumeration(). The issue was caused by acpi dev hid match() not checking if adev is NULL before dereferencing it. Although acpi quirk skip serdev enumeration() is currently never called with a controller parent without an ACPI companion, the check was added as a precaution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2024-17881
ALT-PU-2025-12647
AZL-55361
AZL-55376
BDU:2025-15338
CVE-2024-56782
ECHO-4971-777C-523A
USN-7379-1
USN-7379-2
USN-7380-1
USN-7381-1
USN-7382-1
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7468-1
USN-7523-1
USN-7524-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Ubuntu