CVE-2024-56580
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
27/12/2024
Last modified:
01/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: qcom: camss: fix error path on configuration of power domains<br />
<br />
There is a chance to meet runtime issues during configuration of CAMSS<br />
power domains, because on the error path dev_pm_domain_detach() is<br />
unexpectedly called with NULL or error pointer.<br />
<br />
One of the simplest ways to reproduce the problem is to probe CAMSS<br />
driver before registration of CAMSS power domains, for instance if<br />
a platform CAMCC driver is simply not built.<br />
<br />
Warning backtrace example:<br />
<br />
Unable to handle kernel NULL pointer dereference at virtual address 00000000000001a2<br />
<br />
<br />
<br />
pc : dev_pm_domain_detach+0x8/0x48<br />
lr : camss_probe+0x374/0x9c0<br />
<br />
<br />
<br />
Call trace:<br />
dev_pm_domain_detach+0x8/0x48<br />
platform_probe+0x70/0xf0<br />
really_probe+0xc4/0x2a8<br />
__driver_probe_device+0x80/0x140<br />
driver_probe_device+0x48/0x170<br />
__device_attach_driver+0xc0/0x148<br />
bus_for_each_drv+0x88/0xf0<br />
__device_attach+0xb0/0x1c0<br />
device_initial_probe+0x1c/0x30<br />
bus_probe_device+0xb4/0xc0<br />
deferred_probe_work_func+0x90/0xd0<br />
process_one_work+0x164/0x3e0<br />
worker_thread+0x310/0x420<br />
kthread+0x120/0x130<br />
ret_from_fork+0x10/0x20
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.8 (including) | 6.12.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



