CVE-2024-56577

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

media: mtk-jpeg: Fix null-ptr-deref during unload module

The workqueue should be destroyed in mtk_jpeg_core.c since commit

09aea13ecf6f ("media: mtk-jpeg: refactor some variables"), otherwise

the below calltrace can be easily triggered.

[ 677.862514] Unable to handle kernel paging request at virtual address dfff800000000023

[ 677.863633] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]

...

[ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17

...

[ 677.882838] pc : destroy_workqueue+0x3c/0x770

[ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]

[ 677.884314] sp : ffff80008ad974f0

[ 677.884744] x29: ffff80008ad974f0 x28: ffff0000d7115580 x27: ffff0000dd691070

[ 677.885669] x26: ffff0000dd691408 x25: ffff8000844af3e0 x24: ffff80008ad97690

[ 677.886592] x23: ffff0000e051d400 x22: ffff0000dd691010 x21: dfff80000000

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References