CVE-2024-56540

What it actually does

Race condition in accel/ivpu IPC send/receive allows recovery invocation during probe and resume, leading to null pointer dereferences and kernel crashes.

Why it matters to the business

Affected Linux systems with Intel VPU hardware risk kernel panics on boot or resume, causing unplanned downtime and operational disruption; high ecosystem prevalence in older Ubuntu LTS kernels increases exposure across server and embedded deployments.

How an attack unfolds

An attacker with local access triggers device probe or resume paths where errors incorrectly invoke recovery, racing with initialization and dereferencing null pointers; listed threat actors in 2024 zero-day and Linux kernel campaigns highlight potential for stability-targeted attacks on exposed systems.

How to fix it

Upgrade affected packages to fixed versions: linux 3.13.0-91.138, linux-aws 4.4.0-1002.2 or 4.4.0-1001.10, linux-lts-xenial 4.4.0-28.47~14.04.1, linux 4.4.0-28.47, linux-gke 4.4.0-1003.3, linux-hwe 4.8.0-36.36~16.04.1, linux-raspi2 4.4.0-1016.22, linux-snapdragon 4.4.0-1019.22, and equivalent fixes for lts-utopic, lts-vivid, lts-wily variants.

How to confirm the fix worked

Verify kernel version matches or exceeds listed fixed packages; test probe and resume operations on Intel VPU hardware to confirm graceful error handling without recovery triggers or crashes.

Typical attack path

1. Obtain local access to target system
2. Trigger device probe or system resume events
3. Force error paths in ivpu_send_receive to invoke recovery
4. Exploit resulting race to dereference null pointers and crash kernel

How to detect it

Review kernel logs for null pointer dereference crashes during ivpu_probe or ivpu_resume; correlate with device initialization errors and recovery attempts in dmesg or journalctl around boot/resume timestamps.

What your security team should do

• Prioritize immediate upgrade of all listed Ubuntu packages to fixed versions due to kernel stability risk
• Monitor EPSS trend and threat actor activity for any increase in targeting of Linux kernel race conditions
• Implement staged rollout and regression testing on VPU-equipped systems before broad deployment