github - ghsa-jqcp-w97c-4jjv

ghsa-jqcp-w97c-4jjv

Vulnerability from github

Published

2024-12-28 12:30

Modified

2024-12-28 12:30

Details

In the Linux kernel, the following vulnerability has been resolved:

thermal: testing: Initialize some variables annoteded with _free()

Variables annotated with __free() need to be initialized if the function can return before they get updated for the first time or the attempt to free the memory pointed to by them upon function return may crash the kernel.

Fix this issue in some places in the thermal testing code.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-56676",
   ],
   database_specific: {
      cwe_ids: [],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-12-28T10:15:06Z",
      severity: null,
   },
   details: "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: testing: Initialize some variables annoteded with _free()\n\nVariables annotated with __free() need to be initialized if the function\ncan return before they get updated for the first time or the attempt to\nfree the memory pointed to by them upon function return may crash the\nkernel.\n\nFix this issue in some places in the thermal testing code.",
   id: "GHSA-jqcp-w97c-4jjv",
   modified: "2024-12-28T12:30:46Z",
   published: "2024-12-28T12:30:46Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-56676",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6",
      },
   ],
   schema_version: "1.4.0",
   severity: [],
}

cve-2024-56676

Vulnerability from cvelistv5

Published

2024-12-28 09:46

Modified

2025-01-20 06:25

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: thermal: testing: Initialize some variables annoteded with _free() Variables annotated with __free() need to be initialized if the function can return before they get updated for the first time or the attempt to free the memory pointed to by them upon function return may crash the kernel. Fix this issue in some places in the thermal testing code.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6
	https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac

Impacted products

Vendor

Product

Version

▼

Linux

Version: f6a034f2df426e279f1ecad53626bab80c04796a
Version: f6a034f2df426e279f1ecad53626bab80c04796a

Linux

Version: 6.12

Show details on NVD website

JSON

To clipboard

{
   containers: {
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Linux",
               programFiles: [
                  "drivers/thermal/testing/zone.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "526c132124a62be486bad1701f7e8e92212ccec6",
                     status: "affected",
                     version: "f6a034f2df426e279f1ecad53626bab80c04796a",
                     versionType: "git",
                  },
                  {
                     lessThan: "0104dcdaad3a7afd141e79a5fb817a92ada910ac",
                     status: "affected",
                     version: "f6a034f2df426e279f1ecad53626bab80c04796a",
                     versionType: "git",
                  },
               ],
            },
            {
               defaultStatus: "affected",
               product: "Linux",
               programFiles: [
                  "drivers/thermal/testing/zone.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     status: "affected",
                     version: "6.12",
                  },
                  {
                     lessThan: "6.12",
                     status: "unaffected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.12.*",
                     status: "unaffected",
                     version: "6.12.2",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "*",
                     status: "unaffected",
                     version: "6.13",
                     versionType: "original_commit_for_fix",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: testing: Initialize some variables annoteded with _free()\n\nVariables annotated with __free() need to be initialized if the function\ncan return before they get updated for the first time or the attempt to\nfree the memory pointed to by them upon function return may crash the\nkernel.\n\nFix this issue in some places in the thermal testing code.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-20T06:25:43.910Z",
            orgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            shortName: "Linux",
         },
         references: [
            {
               url: "https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6",
            },
            {
               url: "https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac",
            },
         ],
         title: "thermal: testing: Initialize some variables annoteded with _free()",
         x_generator: {
            engine: "bippy-5f407fcff5a0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      assignerShortName: "Linux",
      cveId: "CVE-2024-56676",
      datePublished: "2024-12-28T09:46:05.536Z",
      dateReserved: "2024-12-27T15:00:39.845Z",
      dateUpdated: "2025-01-20T06:25:43.910Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted