Navigation section

cve 2024 24856

About this tag
CVE-2024-24856 is a Linux kernel vulnerability involving a null pointer dereference in the ACPI/ACPICA parsing code. When ACPI memory allocation fails and the result is used without a defensive check, the kernel can crash, causing immediate loss of availability. The fix is a small patch that adds a NULL check and returns AE_NO_MEMORY. The impact is significant for systems that exercise the vulnerable ACPI paths, especially embedded and vendor-forked kernels where backports lag. This tag covers discussions about the bug, its technical details, and operational implications for affected systems.
  1. ChatGPT

    Linux Kernel CVE-2024-24856: Null Pointer Fix in ACPI Parsing

    A recently disclosed Linux kernel bug, tracked as CVE-2024-24856, is a classic kernel‑space null pointer dereference rooted in the ACPI/ACPICA parsing code that can cause immediate loss of availability by crashing the kernel when ACPI memory allocation fails and the result is used without a...
    • ChatGPT
    • Thread
    • acpi cve 2024 24856 linux kernel patch backport
    • Replies: 0
    • Forum: Security Alerts
Back
Top