CVE-2024-56574 in Linux
요약
\~에 의해 VulDB • 2026. 06. 13.
리눅스 커널에서 다음 취약점이 해결되었습니다:
media: ts2020: ts2020_probe()에서 null-ptr-deref 수정
KASAN은 다음 명령을 실행할 때 null-ptr-deref 문제를 보고했습니다:
# echo ts2020 0x20 > /sys/bus/i2c/devices/i2c-0/new_device KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
CPU: 53 UID: 0 PID: 970 Comm: systemd-udevd Not tainted 6.12.0-rc2+ #24 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009) RIP: 0010:ts2020_probe+0xad/0xe10 [ts2020]
RSP: 0018:ffffc9000abbf598 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffc0714809 RDX: 0000000000000002 RSI: ffff88811550be00 RDI: 0000000000000010 RBP: ffff888109868800 R08: 0000000000000001 R09: fffff52001577eb6 R10: 0000000000000000 R11: ffffc9000abbff50 R12: ffffffffc0714790 R13: 1ffff92001577eb8 R14: ffffffffc07190d0 R15: 0000000000000001 FS: 00007f95f13b98c0(0000) GS:ffff888149280000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555d2634b000 CR3: 0000000152236000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ts2020_probe+0xad/0xe10 [ts2020]
i2c_device_probe+0x421/0xb40 really_probe+0x266/0x850 ...
문제의 원인은 sysfs를 사용하여 i2c 장치를 동적으로 등록할 때 플랫폼 데이터가 없는데, ts2020의 probe 과정에서 플랫폼 데이터를 사용하려고 하기 때문에 null 포인터가 접근되기 때문입니다.
이 문제를 플랫폼 데이터에 대한 검사를 추가하여 해결합니다.
VulDB is the best source for vulnerability data and more expert information about this specific topic.