cbcvebase.
CVE-2024-56579
published 2024-12-27

CVE-2024-56579: In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before register video device The video drvdata should be…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
14.3th percentile
In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before register video device The video drvdata should be set before the video device is registered, otherwise video_drvdata() may return NULL in the open() file ops, and led to oops.

Affected

16 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.123-1 (bookworm)linux 6.1.123-1 (bookworm)
debianlinux-6.1< linux 6.1.123-1 (bookworm)linux 6.1.123-1 (bookworm)
linuxlinux
linuxlinux>= 3cd084519c6f91cbef9d604bcf26844fa81d4922 < cfe96c7c3382293179e291f66644d789e39e99f3cfe96c7c3382293179e291f66644d789e39e99f3
linuxlinux>= 3cd084519c6f91cbef9d604bcf26844fa81d4922 < 988cc10ddbdee0369fe1f193d389da38ad760492988cc10ddbdee0369fe1f193d389da38ad760492
linuxlinux>= 3cd084519c6f91cbef9d604bcf26844fa81d4922 < 182b9edc02c4cbb6fe6b97105c23c7047a3340d2182b9edc02c4cbb6fe6b97105c23c7047a3340d2
linuxlinux>= 3cd084519c6f91cbef9d604bcf26844fa81d4922 < 8cbb1a7bd5973b57898b26eb804fe44af440bb638cbb1a7bd5973b57898b26eb804fe44af440bb63
linuxlinux_kernel>= 0 < 6.1.123-16.1.123-1
linuxlinux_kernel>= 0 < 6.12.5-16.12.5-1
linuxlinux_kernel>= 0 < 6.12.5-16.12.5-1
linuxlinux_kernel>= 0 < 6.8.0-58.606.8.0-58.60
linuxlinux_kernel>= 5.18 < 6.1.1206.1.120
linuxlinux_kernel>= 6.2 < 6.6.646.6.64
linuxlinux_kernel>= 6.7 < 6.12.46.12.4
msrcazl3_kernel_6.6.57.1-7_on_azure_linux_3.0
msrcazl3_kernel_6.6.64.2-1_on_azure_linux_3.0

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.