PT-2024-36887
CVE-2024-56580
·
Published
2024-10-12
·
Updated
2025-05-26
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the configuration of CAMSS power domains in the Linux kernel. There is a chance to encounter runtime issues because the
dev pm domain detach() function is unexpectedly called with a NULL or error pointer on the error path. This can be reproduced by probing the CAMSS driver before registering the CAMSS power domains, for instance, if a platform CAMCC driver is not built. A warning backtrace example shows a kernel NULL pointer dereference at a virtual address.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾