CVE-2024-56569 ftrace: Fix regression with module command in stack_trace_filter

Medium 5.5 Published Updated

A local attacker can trigger a kernel crash via a specific ftrace command, causing a denial of service.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2024-56569?

CVE-2024-56569 is a medium-severity vulnerability in Linux kernel, published on 27 Dec 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Fix regression with module command in stack_trace_filter

When executing the following command:

# echo "write*:mod:ext3" > /sys/kernel/tracing/stack_trace_filter

The current mod command causes a null pointer dereference. While commit 0f17976568b3f ("ftrace: Fix regression with module command in stack_trace_filter") has addressed part of the issue, it left a corner case unhandled, which still results in a kernel crash.

Weakness: CWE-476

Which versions are affected by CVE-2024-56569?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2024-56569?

Apply the vendor's patch.

Is CVE-2024-56569 being exploited?

There is no known exploitation of CVE-2024-56569 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as AZL-56178, BELL-CVE-2024-56569, DEBIAN-CVE-2024-56569, GHSA-hc3h-g2hw-g96p, UBUNTU-CVE-2024-56569.

Is CVE-2024-56569 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free