fkie_nvd - fkie_cve-2024-56676

fkie_cve-2024-56676

Vulnerability from fkie_nvd

Published

2024-12-28 10:15

Modified

2024-12-28 10:15

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: thermal: testing: Initialize some variables annoteded with _free() Variables annotated with __free() need to be initialized if the function can return before they get updated for the first time or the attempt to free the memory pointed to by them upon function return may crash the kernel. Fix this issue in some places in the thermal testing code.

References

▼	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: testing: Initialize some variables annoteded with _free()\n\nVariables annotated with __free() need to be initialized if the function\ncan return before they get updated for the first time or the attempt to\nfree the memory pointed to by them upon function return may crash the\nkernel.\n\nFix this issue in some places in the thermal testing code."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: thermal: testing: Initialize some variables annotated with _free() Las variables anotadas con __free() deben inicializarse si la funci\u00f3n puede regresar antes de que se actualicen por primera vez o el intento de liberar la memoria a la que apuntan al regresar la funci\u00f3n puede hacer que el kernel se bloquee. Corrija este problema en algunos lugares del c\u00f3digo de pruebas t\u00e9rmicas."
    }
  ],
  "id": "CVE-2024-56676",
  "lastModified": "2024-12-28T10:15:06.113",
  "metrics": {},
  "published": "2024-12-28T10:15:06.113",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Awaiting Analysis"
}

cve-2024-56676

Vulnerability from cvelistv5

Published

2024-12-28 09:46

Modified

2025-01-20 06:25

Severity ?

Summary

References

▼	URL	Tags
	https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6
	https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac

Impacted products

Vendor

Product

Version

▼

Linux

Version: f6a034f2df426e279f1ecad53626bab80c04796a
Version: f6a034f2df426e279f1ecad53626bab80c04796a

Linux

Version: 6.12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/thermal/testing/zone.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "526c132124a62be486bad1701f7e8e92212ccec6",
              "status": "affected",
              "version": "f6a034f2df426e279f1ecad53626bab80c04796a",
              "versionType": "git"
            },
            {
              "lessThan": "0104dcdaad3a7afd141e79a5fb817a92ada910ac",
              "status": "affected",
              "version": "f6a034f2df426e279f1ecad53626bab80c04796a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/thermal/testing/zone.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.12"
            },
            {
              "lessThan": "6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: testing: Initialize some variables annoteded with _free()\n\nVariables annotated with __free() need to be initialized if the function\ncan return before they get updated for the first time or the attempt to\nfree the memory pointed to by them upon function return may crash the\nkernel.\n\nFix this issue in some places in the thermal testing code."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-20T06:25:43.910Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6"
        },
        {
          "url": "https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac"
        }
      ],
      "title": "thermal: testing: Initialize some variables annoteded with _free()",
      "x_generator": {
        "engine": "bippy-5f407fcff5a0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-56676",
    "datePublished": "2024-12-28T09:46:05.536Z",
    "dateReserved": "2024-12-27T15:00:39.845Z",
    "dateUpdated": "2025-01-20T06:25:43.910Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted