CVE-2024-56767

5.5 · MEDIUM

Published Jan 6, 2025 linux CWE-476 EPSS 0.22% (12th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-56767 is a medium-severity vulnerability affecting linux linux_kernel. It was published on January 6, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset

The at_xdmac_memset_create_desc may return NULL, which will lead to a

null pointer dereference. For example, the len input is error, or the

atchan->free_descs_list is empty and memory is exhausted. Therefore, add

check to avoid this.

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 4.2, < 6.1.123	Affected

References

Ref git.kernel.org/stable/c/3d229600c54e9e0909080ecaf1aab0642aefa5f0 Ref git.kernel.org/stable/c/54376d8d26596f98ed7432a788314bb9154bf3e3 Ref git.kernel.org/stable/c/8d364597de9ce2a5f52714224bfe6c2e7a29b303 Ref git.kernel.org/stable/c/c43ec96e8d34399bd9dab2f2dc316b904892133f Ref git.kernel.org/stable/c/e658f1c133b854b2ae799147301d82dddb8f3162 Ref git.kernel.org/stable/c/ed1a8aaa344522c0c349ac9042db27ad130ef913 Ref git.kernel.org/stable/c/fdba6d5e455388377ec7e82a5913ddfcc7edd93b Ref lists.debian.org/debian-lts-announce/2025/03/msg00001.html Ref lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Frequently Asked Questions

What is CVE-2024-56767?

CVE-2024-56767 is a medium-severity vulnerability affecting linux linux_kernel. It was published on January 6, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-56767?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-56767?

How can CyberStrike help with CVE-2024-56767?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-56767 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719