CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload
In the Linux kernel, the following vulnerability has been resolved:
EDAC/igen6: Avoid segmentation fault on module unload
The segmentation fault happens because:
During modprobe: 1. In igen6probe(), igen6pvt will be allocated with kzalloc() 2. In igen6registermci(), mci->pvtinfo will point to &igen6pvt->imc[mc]
During rmmod: 1. In mcirelease() in edacmc.c, it will kfree(mci->pvtinfo) 2. In igen6remove(), it will kfree(igen6pvt);
Fix this issue by setting mci->pvtinfo to NULL to avoid the double kfree.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56708?
CVE-2024-56708 has a medium severity rating due to the potential for segmentation faults affecting the stability of the Linux kernel.
How do I fix CVE-2024-56708?
To fix CVE-2024-56708, users should upgrade to a kernel version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-56708?
CVE-2024-56708 affects Linux kernel versions between 5.11 and 5.15.174, as well as 5.16 to 6.1.120, 6.2 to 6.6.64, 6.7 to 6.11.11, and 6.12 to 6.12.2.
What is the nature of the vulnerability CVE-2024-56708?
CVE-2024-56708 is a vulnerability that leads to a segmentation fault during module unload in the Linux kernel's EDAC/igen6 handling.
Is CVE-2024-56708 a critical vulnerability?
No, CVE-2024-56708 is not classified as a critical vulnerability, but it can impact system stability if exploited.