What’s Vulnerable › Vulnerabilities

CVE-2024-56676: thermal: testing: Initialize some variables annoteded with _free()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-28 · updated 2026-06-17
• Weakness: CWE-909

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: testing: Initialize some variables annoteded with _free() Variables annotated with __free() need to be initialized if the function can return before they get updated for the first time or the attempt to free the memory pointed to by them upon function return may crash the kernel. Fix this issue in some places in the thermal testing code.

Affected products

• Linux kernel: from 6.12 before 6.12.2 — fixed in 6.12.2

How to fix

Upgrade to a fixed version: Linux kernel 6.12.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac
• https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6

Get alerted when CVE-2024-56676 or the next vulnerability affects your stack