CVE-2024-56670

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description A vulnerability in the Linux kernel's u serial driver has been resolved. The issue occurred when the gs start io function accessed a null pointer, causing a crash. This happened in extreme cases where multiple threads accessed the u serial driver, and one thread executed the gs open function while another thread executed the gserial disconnect function, setting the port->port usb pointer to NULL. To fix this, a null pointer check was added to gs start io before attempting to access the port->port usb pointer.

Recommendations Update to Linux kernel version 6.6.74 or later to resolve the issue. As a temporary workaround, consider adding a null pointer check to gs start io before attempting to access the port->port usb pointer.