CVE-2024-56754

low-risk

Published 2024-12-29

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Fix the pointer passed to caam_qi_shutdown() The type of the last parameter given to devm_add_action_or_reset() is "struct caam_drv_private *", but in caam_qi_shutdown(), it is casted to "struct device *". Pass the correct parameter to devm_add_action_or_reset() so that the resources are released as expected.

Do I need to act?

0.01% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Linux Kernel

Affected Vendors

Linux

References (9)

Patch https://git.kernel.org/stable/c/1f8e2f597b918ca5827a5c6d00b819d064264d1c

Patch https://git.kernel.org/stable/c/6187727e57aec122c8a99c464c74578c810cbe40

Patch https://git.kernel.org/stable/c/66eddb8dcb61065c53098510165f14b54232bcc2

Patch https://git.kernel.org/stable/c/84a185aea7b83f620699de0ea36907d588d89cf6

Patch https://git.kernel.org/stable/c/ad39df0898d3f469776c19d99229be055cc2dcea

Patch https://git.kernel.org/stable/c/ad980b04f51f7fb503530bd1cb328ba5e75a250e

Patch https://git.kernel.org/stable/c/cc386170b3312fd7b5bc4a69a9f52d7f50814526

https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal