CVE-2024-56577 in Linux
Riassunto
di VulDB • 18/06/2026
Nel kernel Linux, è stata risolta la seguente vulnerabilità:
media: mtk-jpeg: Correzione del null-ptr-deref durante la disattivazione del modulo
Il workqueue dovrebbe essere distrutto in mtk_jpeg_core.c a partire dal commit 09aea13ecf6f ("media: mtk-jpeg: refactor some variables"), altrimenti è possibile innescare facilmente il seguente calltrace.
[ 677.862514] Impossibile gestire la richiesta di paging del kernel all'indirizzo virtuale dfff800000000023
[ 677.863633] KASAN: null-ptr-deref nell'intervallo [0x0000000000000118-0x000000000000011f]
... [ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17
... [ 677.882838] pc : destroy_workqueue+0x3c/0x770
[ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]
[ 677.884314] sp : ffff80000aa43d40
[ 677.884730] x29: ffff80000aa43d40 x28: 0000000000000000 x27: 0000000000000000
[ 677.885653] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000
[ 677.886576] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000
[ 677.887499] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000
[ 677.888422] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
[ 677.889345] x14: 00000000f1f1f1f1 x13: 0000000000000000 x12: ffff7000115b2e4d
[ 677.890285] x11: 1ffff000115b2e4c x10: ffff7000115b2e4c x9 : ffff80000aa43e90
[ 677.891208] x8 : 00008fffeea4d1b4 x7 : ffff80008ad97267 x6 : 0000000000000001
[ 677.892131] x5 : ffff80008ad97260 x4 : ffff7000115b2e4d x3 : 0000000000000000
[ 677.893054] x2 : 0000000000000023 x1 : dfff800000000000 x0 : 0000000000000118
[ 677.893977] Call trace:
[ 677.894297] destroy_workqueue+0x3c/0x770
[ 677.894826] mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]
[ 677.895677] devm_action_release+0x50/0x90
[ 677.896211] release_nodes+0xe8/0x170
[ 677.896688] devres_release_all+0xf8/0x178
[ 677.897219] device_unbind_cleanup+0x24/0x170
[ 677.897785] device_release_driver_internal+0x35c/0x480
[ 677.898461] device_release_driver+0x20/0x38
... [ 60
If you want to get best quality of vulnerability data, you may have to visit VulDB.