Executive Summary

Informations
Name CVE-2024-56652 First vendor Publication 2024-12-27
Vendor Cve Last vendor Modification 2025-02-11

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 7.8
Base Score 7.8 Environmental Score 7.8
impact SubScore 5.9 Temporal Score 7.8
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/reg_sr: Remove register pool

That pool implementation doesn't really work: if the krealloc happens to move the memory and return another address, the entries in the xarray become invalid, leading to use-after-free later:

BUG: KASAN: slab-use-after-free in xe_reg_sr_apply_mmio+0x570/0x760 [xe]
Read of size 4 at addr ffff8881244b2590 by task modprobe/2753

Allocated by task 2753:
kasan_save_stack+0x39/0x70
kasan_save_track+0x14/0x40
kasan_save_alloc_info+0x37/0x60
__kasan_kmalloc+0xc3/0xd0
__kmalloc_node_track_caller_noprof+0x200/0x6d0
krealloc_noprof+0x229/0x380

Simplify the code to fix the bug. A better pooling strategy may be added back later if needed.

(cherry picked from commit e5283bd4dfecbd3335f43b62a68e24dae23f59e4)

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56652

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-416 Use After Free

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3703

Sources (Detail)

https://git.kernel.org/stable/c/b0193a31a0ca5a0f9e60bb4a86537d46b98111b8
https://git.kernel.org/stable/c/d7b028656c29b22fcde1c6ee1df5b28fbba987b5
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
Date Informations
2025-07-15 02:41:13
  • Multiple Updates
2025-07-14 12:38:30
  • Multiple Updates
2025-06-26 02:38:27
  • Multiple Updates
2025-06-25 12:36:31
  • Multiple Updates
2025-06-24 02:43:05
  • Multiple Updates
2025-05-27 02:48:30
  • Multiple Updates
2025-03-29 03:44:24
  • Multiple Updates
2025-03-28 13:47:40
  • Multiple Updates
2025-03-28 03:22:13
  • Multiple Updates
2025-03-19 03:17:02
  • Multiple Updates
2025-03-18 03:30:01
  • Multiple Updates
2025-03-14 03:17:09
  • Multiple Updates
2025-03-06 14:13:41
  • Multiple Updates
2025-02-22 03:27:13
  • Multiple Updates
2025-02-11 21:20:53
  • Multiple Updates
2025-01-08 00:20:56
  • Multiple Updates
2025-01-07 03:08:11
  • Multiple Updates
2025-01-07 00:20:46
  • Multiple Updates
2024-12-27 21:20:28
  • First insertion