CVE-2024-56676

MEDIUM

Linux Kernel - Memory Corruption

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: testing: Initialize some variables annoteded with _free() Variables annotated with __free() need to be initialized if the function can return before they get updated for the first time or the attempt to free the memory pointed to by them upon function return may crash the kernel. Fix this issue in some places in the thermal testing code.

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 5.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-909
Status published
Products (2)
linux/Kernel 6.12.0 - 6.12.2linux
linux/linux_kernel 6.12 - 6.12.2
Published Dec 28, 2024
Tracked Since Feb 18, 2026