CVE-2024-56696: ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()
In the Linux kernel, the following vulnerability has been resolved:
ALSA: core: Fix possible NULL dereference caused by kunitkzalloc()
kunitkzalloc() may return a NULL pointer, dereferencing it without NULL check may lead to NULL dereference. Add NULL checks for all the kunitkzalloc() in soundkunit.c
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56696?
The severity of CVE-2024-56696 is currently assessed to be moderate due to the potential for a NULL dereference.
How do I fix CVE-2024-56696?
To fix CVE-2024-56696, ensure you update your Linux kernel to a version newer than 6.11.11 or 6.12.2 which include the necessary NULL checks.
What versions of the Linux kernel are affected by CVE-2024-56696?
CVE-2024-56696 affects the Linux kernel versions between 6.9 and 6.11.11 and from 6.12 to 6.12.2.
What is the main issue caused by CVE-2024-56696?
The main issue caused by CVE-2024-56696 is a possible NULL dereference when dereferencing a NULL pointer from kunit_kzalloc().
Is CVE-2024-56696 a remote attack vulnerability?
CVE-2024-56696 is not classified as a remote attack vulnerability, as it involves a local NULL dereference issue.