CVE-2024-56580

MEDIUM

Linux Kernel 6.8-6.12.3 - NULL Pointer Dereference in CAMSS Power Domain Configuration

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: fix error path on configuration of power domains There is a chance to meet runtime issues during configuration of CAMSS power domains, because on the error path dev_pm_domain_detach() is unexpectedly called with NULL or error pointer. One of the simplest ways to reproduce the problem is to probe CAMSS driver before registration of CAMSS power domains, for instance if a platform CAMCC driver is simply not built. Warning backtrace example: Unable to handle kernel NULL pointer dereference at virtual address 00000000000001a2 <snip> pc : dev_pm_domain_detach+0x8/0x48 lr : camss_probe+0x374/0x9c0 <snip> Call trace: dev_pm_domain_detach+0x8/0x48 platform_probe+0x70/0xf0 really_probe+0xc4/0x2a8 __driver_probe_device+0x80/0x140 driver_probe_device+0x48/0x170 __device_attach_driver+0xc0/0x148 bus_for_each_drv+0x88/0xf0 __device_attach+0xb0/0x1c0 device_initial_probe+0x1c/0x30 bus_probe_device+0xb4/0xc0 deferred_probe_work_func+0x90/0xd0 process_one_work+0x164/0x3e0 worker_thread+0x310/0x420 kthread+0x120/0x130 ret_from_fork+0x10/0x20

Scores

CVSS v3 5.5
EPSS 0.0019
EPSS Percentile 9.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (8)
linux/Kernel 6.8.0 - 6.12.4linux
Linux/Linux < 6.8
Linux/Linux 23aa4f0cd3273b269560a9236c48b43a3982ac13 - 4f45d65b781499d2a79eca12155532739c876aa2
Linux/Linux 23aa4f0cd3273b269560a9236c48b43a3982ac13 - c98586d8d01c9e860e7acc3807c2afeb1dc14e8a
Linux/Linux 6.12.4 - 6.12.*
Linux/Linux 6.13
Linux/Linux 6.8
linux/linux_kernel 6.8 - 6.12.4
Published Dec 27, 2024
Tracked Since Feb 18, 2026