CVE-2024-56577

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the null-ptr-deref issue in the mtk-jpeg module

Description A null-ptr-deref issue has been resolved in the Linux kernel. The workqueue should be destroyed in mtk jpeg core.c since a specific commit, otherwise, a calltrace can be easily triggered. The issue is related to the mtk-jpeg module and can cause a kernel paging request error.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the null-ptr-deref issue in the mtk-jpeg module. As a temporary workaround, consider disabling the mtk jpegdec destroy workqueue() function until a patch is available. Restrict access to the vulnerable mtk jpeg core.c module to minimize the risk of exploitation.