CVE-2024-56620 - CVE House

Back to Database

Status published Unknown CVE-2024-56620

scsi: ufs: qcom: Only free platform MSIs when ESI is enabled

0 CVSS

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled Otherwise, it will result in a NULL pointer dereference as below: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Call trace: mutex_lock+0xc/0x54 platform_device_msi_free_irqs_all+0x14/0x20 ufs_qcom_remove+0x34/0x48 [ufs_qcom] platform_remove+0x28/0x44 device_remove+0x4c/0x80 device_release_driver_internal+0xd8/0x178 driver_detach+0x50/0x9c bus_remove_driver+0x6c/0xbc driver_unregister+0x30/0x60 platform_driver_unregister+0x14/0x20 ufs_qcom_pltform_exit+0x18/0xb94 [ufs_qcom] __arm64_sys_delete_module+0x180/0x260 invoke_syscall+0x44/0x100 el0_svc_common.constprop.0+0xc0/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x34/0xdc el0t_64_sync_handler+0xc0/0xc4 el0t_64_sync+0x190/0x194

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-56620

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux

View All →

drm/vkms: Convert to DRM's vblank timer

drm/panthor: Recover from panthor_gpu_flush_caches() failures

PCI: endpoint: Add missing NULL check for alloc_workqueue()

fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()

fs/ntfs3: Initialize new folios before use

Affected Vendor

Linux

View all reports →

Affected Software

Linux

Vulnerable Versions:

519b6274a7775f5fe00a086f189efb8f063467d1, 6.3, 0, 6.6.86, 6.12.5, 6.13

Timeline

Official Publish: December 27th, 2024

Last Modified: May 11th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.