CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter
First published: Fri Dec 27 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the following command: # echo "write*:mod:ext3" > /sys/kernel/tracing/stack_trace_filter The current mod command causes a null pointer dereference. While commit 0f17976568b3f ("ftrace: Fix regression with module command in stack_trace_filter") has addressed part of the issue, it left a corner case unhandled, which still results in a kernel crash.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| Linux Kernel | >=4.12<5.4.287 | |
| Linux Kernel | >=5.5<5.10.231 | |
| Linux Kernel | >=5.11<5.15.174 | |
| Linux Kernel | >=5.16<6.1.120 | |
| Linux Kernel | >=6.2<6.6.64 | |
| Linux Kernel | >=6.7<6.12.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/43ca32ce12888fb0eeb2d74dfc558dea60d3473e
- https://git.kernel.org/stable/c/5dabb7af57bc72308a6e2e81a5dd756eef283803
- https://git.kernel.org/stable/c/885109aa0c70639527dd6a65c82e63c9ac055e3d
- https://git.kernel.org/stable/c/7ae27880de3482e063fcc1f72d9a298d0d391407
- https://git.kernel.org/stable/c/8a92dc4df89c50bdb26667419ea70e0abbce456e
- https://git.kernel.org/stable/c/19cacabdd5a8487ae566cbecb4d03bcb038a067e
- https://git.kernel.org/stable/c/45af52e7d3b8560f21d139b3759735eead8b1653
Frequently Asked Questions
What is the severity of CVE-2024-56569?
CVE-2024-56569 represents a moderate severity vulnerability in the Linux kernel due to a regression in the ftrace module.
How do I fix CVE-2024-56569?
To fix CVE-2024-56569, update your Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-56569?
CVE-2024-56569 affects multiple versions of the Linux kernel between 4.12 and 6.12.4.
What vulnerabilities does CVE-2024-56569 address?
CVE-2024-56569 addresses a regression issue with the module command in stack_trace_filter within the Linux kernel.
Is CVE-2024-56569 exploitable remotely?
CVE-2024-56569 is not classified as a remotely exploitable vulnerability, as it requires local command execution to trigger.
- agent/references
- agent/weakness
- agent/title
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/softwarecombine
- vendor/linux
- canonical/linux kernel
- version/linux kernel/4.12
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.16
- version/linux kernel/6.2
- version/linux kernel/6.7