SB2024090537 - NULL pointer dereference in Linux kernel rtla src
Published: September 5, 2024 Updated: May 12, 2025
Security Bulletin ID
SB2024090537
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2024-45002)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the osnoise_init_top() function in tools/tracing/rtla/src/osnoise_top.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/fc575212c6b75d538e1a0a74f4c7e2ac73bc46ac
- https://git.kernel.org/stable/c/753f1745146e03abd17eec8eee95faffc96d743d
- https://git.kernel.org/stable/c/abdb9ddaaab476e62805e36cce7b4ef8413ffd01
- https://git.kernel.org/stable/c/90574d2a675947858b47008df8d07f75ea50d0d0
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.107
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10.7
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.48