CVE-2024-56569

ftrace: Fix regression with module command in stack_trace_filter

State: Published
Severity: 5.5 Medium
Published: Dec 27, 2024
Updated: Oct 15, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Fix regression with module command in stack_trace_filter

When executing the following command:

# echo "write*:mod:ext3" > /sys/kernel/tracing/stack_trace_filter

The current mod command causes a null pointer dereference. While commit 0f17976568b3f ("ftrace: Fix regression with module command in stack_trace_filter") has addressed part of the issue, it left a corner case unhandled, which still results in a kernel crash.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	04ec7bb642b77374b53731b795b5654b5aff1c00 to before 43ca32ce12888fb0eeb2d74dfc558dea60d3473eAffected 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 5dabb7af57bc72308a6e2e81a5dd756eef283803Affected 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 885109aa0c70639527dd6a65c82e63c9ac055e3dAffected 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 7ae27880de3482e063fcc1f72d9a298d0d391407Affected 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 8a92dc4df89c50bdb26667419ea70e0abbce456eAffected 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 19cacabdd5a8487ae566cbecb4d03bcb038a067eAffected 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 45af52e7d3b8560f21d139b3759735eead8b1653Affected
LinuxLinux	4.12Affected before 4.12Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.12.4 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

04ec7bb642b77374b53731b795b5654b5aff1c00 to before 43ca32ce12888fb0eeb2d74dfc558dea60d3473eAffected
04ec7bb642b77374b53731b795b5654b5aff1c00 to before 5dabb7af57bc72308a6e2e81a5dd756eef283803Affected
04ec7bb642b77374b53731b795b5654b5aff1c00 to before 885109aa0c70639527dd6a65c82e63c9ac055e3dAffected
04ec7bb642b77374b53731b795b5654b5aff1c00 to before 7ae27880de3482e063fcc1f72d9a298d0d391407Affected
04ec7bb642b77374b53731b795b5654b5aff1c00 to before 8a92dc4df89c50bdb26667419ea70e0abbce456eAffected
04ec7bb642b77374b53731b795b5654b5aff1c00 to before 19cacabdd5a8487ae566cbecb4d03bcb038a067eAffected
04ec7bb642b77374b53731b795b5654b5aff1c00 to before 45af52e7d3b8560f21d139b3759735eead8b1653Affected

LinuxLinux

4.12Affected
before 4.12Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.12.4 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.