CVE-2024-56569 ftrace: Fix regression with module command in stack_trace_filter
A local attacker can trigger a kernel crash via a specific ftrace command, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-56569?
CVE-2024-56569 is a medium-severity vulnerability in Linux kernel, published on 27 Dec 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Fix regression with module command in stack_trace_filter
When executing the following command:
# echo "write*:mod:ext3" > /sys/kernel/tracing/stack_trace_filter
The current mod command causes a null pointer dereference. While commit 0f17976568b3f ("ftrace: Fix regression with module command in stack_trace_filter") has addressed part of the issue, it left a corner case unhandled, which still results in a kernel crash.
Weakness: CWE-476
Which versions are affected by CVE-2024-56569?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-56569?
Apply the vendor's patch.
Is CVE-2024-56569 being exploited?
There is no known exploitation of CVE-2024-56569 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-56178, BELL-CVE-2024-56569, DEBIAN-CVE-2024-56569, GHSA-hc3h-g2hw-g96p, UBUNTU-CVE-2024-56569.