QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-56573

Back to search

CVE-2024-56573

Published: Dec 27, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdline_ptr is an out parameter, which is not allocated by the function itself, and likely points into the caller's stack. cmdline refers to the pool allocation that should be freed when cleaning up after a failure, so pass this instead to free_pool().

VendorProductVersions

Linux

Linux

affected
42c8ea3dca094ab82776ca706fb7a9cbe8ac3dc9 - < d173aee5709bd0994d216d60589ec67f8b11376a
affected
42c8ea3dca094ab82776ca706fb7a9cbe8ac3dc9 - < eaafbcf0a5782ae412ca7de12ef83fc48ccea4cf
affected
42c8ea3dca094ab82776ca706fb7a9cbe8ac3dc9 - < 06d39d79cbd5a91a33707951ebf2512d0e759847

Linux

Linux

affected
6.2
unaffected
0 - < 6.2
unaffected
6.6.64 - <= 6.6.*
unaffected
6.12.4 - <= 6.12.*
unaffected
6.13 - <= *

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now