5.5

CVE-2024-56739: linux Use of Uninitialized Resource

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-56739DEBIAN-CVE-2024-56739
Published 29-12-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-56739 is a medium (CVSS 5.5) Use of Uninitialized Resource vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 13.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 47 · Related 46
DLA-4075-1DLA-4076-1RHSA-2025:20518SUSE-SU-2025:0289-1SUSE-SU-2025:0428-1SUSE-SU-2025:0499-1

Timeline

  1. 29-12-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() If the __rtc_read_time call fails,, the struct rtc_time tm; may contain uninitialized data, or an illegal date/time read from the RTC hardware. When calling rtc_tm_to_ktime later, the result may be a very large value (possibly KTIME_MAX). If there are periodic timers in rtc->timerqueue, they will continually expire, may causing kernel softlockup.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu134 products
  • linuxAll versions (No fix recorded) | < 5.4.0-211.231 | < 5.15.0-135.146 | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1142.152 | < 5.15.0-1080.87 | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < 39ad0a1ae17b54509cd9e93dcd8cec16e7c12d3f | ≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < 44b3257ff705d63d5f00ef8ed314a0eeb7ec37f2 | ≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < 0d68e8514d9040108ff7d1b37ca71096674b6efe | ≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < 246f621d363988e7040f4546d20203dc713fa3e1 | ≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < fde56535505dde3336df438e949ef4742b6d6d6e | ≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < dd4b1cbcc916fad5d10c2662b62def9f05e453d4 | ≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < a1f0b4af90cc18b10261ecde56c6a56b22c75bd1 | ≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < e77bce0a8c3989b4173c36f4195122bca8f4a3e1 | ≥ 6610e0893b8bc6f59b14fed7f089c5997f035f88, < e8ba8a2bc4f60a1065f23d6a0e7cbea945a0f40d | 2.6.38
  • linux_kernel≥ 2.6.38, < 4.19.325 | ≥ 4.20, < 5.4.287 | ≥ 5.5, < 5.10.231 | ≥ 5.11, < 5.15.174 | ≥ 5.16, < 6.1.120 | ≥ 6.2, < 6.6.64 | ≥ 6.7, < 6.11.11 | ≥ 6.12, < 6.12.2
Debian1 product
  • linux< 6.1.123-1 | < 6.12.3-1

3 vendors · 137 products

References

50 links
Show all 50 references