CVE-2024-56579

What it actually does

Null pointer dereference in the amphion video driver's open() file operation occurs because video_drvdata() returns NULL when drvdata is not initialized prior to video device registration, leading to kernel oops.

Why it matters to the business

Affected Xen packages on Ubuntu systems may experience kernel crashes during video device access, causing denial of service and operational disruption on systems using the amphion media driver.

How an attack unfolds

An attacker opens the vulnerable amphion video device node, causing the open handler to call video_drvdata() which returns NULL due to missing drvdata setup, triggering the oops.

How to fix it

Upgrade xen packages to fixed versions: 4.4.2-0ubuntu0.14.04.6 on Ubuntu 14.04 LTS or 4.6.0-1ubuntu4.1 on Ubuntu 16.04 LTS; rebuild and reboot with the updated kernel modules.

How to confirm the fix worked

Confirm installed xen package versions match the fixed releases, then exercise video device open operations to verify no oops occurs in dmesg.

Typical attack path

1. Locate the amphion video device node on the system
2. Open the device file using standard file operations
3. Trigger the uninitialized drvdata path in the open handler
4. Cause kernel oops and potential system instability

How to detect it

Review kernel logs and dmesg for oops or panic messages referencing amphion, video_drvdata, or media device registration failures.

What your security team should do

• Apply the listed xen package updates on all affected Ubuntu systems without delay
• Monitor kernel logs for amphion-related oops entries
• Limit unprivileged access to /dev/video* nodes until patched