Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Fix the pointer passed to caam_qi_shutdown() The type of the last parameter given to devm_add_action_or_reset() is "struct caam_drv_private *", but in caam_qi_shutdown(), it is casted to "struct device *". Pass the correct parameter to devm_add_action_or_reset() so that the resources are released as expected.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.5, < 5.10.231 |
References
- https://git.kernel.org/stable/c/1f8e2f597b918ca5827a5c6d00b819d064264d1cPatch
- https://git.kernel.org/stable/c/6187727e57aec122c8a99c464c74578c810cbe40Patch
- https://git.kernel.org/stable/c/66eddb8dcb61065c53098510165f14b54232bcc2Patch
- https://git.kernel.org/stable/c/84a185aea7b83f620699de0ea36907d588d89cf6Patch
- https://git.kernel.org/stable/c/ad39df0898d3f469776c19d99229be055cc2dceaPatch
- https://git.kernel.org/stable/c/ad980b04f51f7fb503530bd1cb328ba5e75a250ePatch
- https://git.kernel.org/stable/c/cc386170b3312fd7b5bc4a69a9f52d7f50814526Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
FAQ
What is CVE-2024-56754?
CVE-2024-56754 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Fix the pointer passed to caam_qi_shutdown() The type of the last parameter given to devm_add_action_or_reset() is ...
How severe is CVE-2024-56754?
CVE-2024-56754 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-56754?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.