CVE-2024-56580

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
27/12/2024
Last modified:
01/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: qcom: camss: fix error path on configuration of power domains<br /> <br /> There is a chance to meet runtime issues during configuration of CAMSS<br /> power domains, because on the error path dev_pm_domain_detach() is<br /> unexpectedly called with NULL or error pointer.<br /> <br /> One of the simplest ways to reproduce the problem is to probe CAMSS<br /> driver before registration of CAMSS power domains, for instance if<br /> a platform CAMCC driver is simply not built.<br /> <br /> Warning backtrace example:<br /> <br /> Unable to handle kernel NULL pointer dereference at virtual address 00000000000001a2<br /> <br /> <br /> <br /> pc : dev_pm_domain_detach+0x8/0x48<br /> lr : camss_probe+0x374/0x9c0<br /> <br /> <br /> <br /> Call trace:<br /> dev_pm_domain_detach+0x8/0x48<br /> platform_probe+0x70/0xf0<br /> really_probe+0xc4/0x2a8<br /> __driver_probe_device+0x80/0x140<br /> driver_probe_device+0x48/0x170<br /> __device_attach_driver+0xc0/0x148<br /> bus_for_each_drv+0x88/0xf0<br /> __device_attach+0xb0/0x1c0<br /> device_initial_probe+0x1c/0x30<br /> bus_probe_device+0xb4/0xc0<br /> deferred_probe_work_func+0x90/0xd0<br /> process_one_work+0x164/0x3e0<br /> worker_thread+0x310/0x420<br /> kthread+0x120/0x130<br /> ret_from_fork+0x10/0x20

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.8 (including) 6.12.4 (excluding)