VDB

CVE-2024-56569

CVE-2024-56569 PUBLISHED CVSS 5.5 MEDIUM

ftrace: Fix regression with module command in stack_trace_filter

Reported by linux · Published December 27, 2024

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the following command: # echo "write*:mod:ext3" > /sys/kernel/tracing/stack_trace_filter The current mod command causes a null pointer dereference. While commit 0f17976568b3f ("ftrace: Fix regression with module command in stack_trace_filter") has addressed part of the issue, it left a corner case unhandled, which still results in a kernel crash.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
kernel-toolsAmazon Linux6.1.124-134.200.amzn2023
kernel-modules-extra-commonAmazon Linux6.1.124-134.200.amzn2023

Risk scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersions
LinuxLinux04ec7bb642b77374b53731b795b5654b5aff1c00, 04ec7bb642b77374b53731b795b5654b5aff1c00, 04ec7bb642b77374b53731b795b5654b5aff1c00
LinuxLinux4.12, 0, 5.4.287
amazon:2023kernel-tools0
amazon:2023kernel-modules-extra-common0
linuxlinux_kernel4.12, 4.12, 4.12
amazon:2023kernel-libbpf0
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP3.1.0
amazon:2023kernel-modules-extra0
amazon:2023perf0
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP3.1.0
amazon:2023bpftool0
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family0
LinuxLinux04ec7bb642b77374b53731b795b5654b5aff1c00, 4.12, 0
amazon:2023kernel-livepatch-6.1.124-134.2000
amazon:2023kernel-headers0
SiemensRUGGEDCOM RST2428P0
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP3.1.0
amazon:2023kernel-libbpf-devel0
amazon:2023kernel-libbpf-static0
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family0

…and 4 more

Timeline

  • Dec 27, 2024 CVE Published
  • Dec 28, 2024 EPSS Score (30 in total, the first dated here)
  • Mar 1, 2025 Coalition ESS Score (7 in total, the first dated here)
  • Dec 16, 2025 PoC Published
  • Dec 30, 2025 Security Advisory (422 in total, the first dated here)
  • Dec 30, 2025 CVE Updated
  • Apr 29, 2026 Distribution Patch (340 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-56569
vulnetix vdb fixes CVE-2024-56569

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-56569/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›