CVE-2024-46822 – This CVE describes a NULL pointer dereference v... (How to Fix)

Q: What is the severity of CVE-2024-46822?

CVE-2024-46822 has a CVSS score of 5.5 (MEDIUM). This CVE describes a NULL pointer dereference vulnerability in the Linux kernel's ACPI subsystem for ARM64 systems. If triggered, it could cause a kernel panic leading to denial of service. The vulnerability affects ARM64 Linux systems using ACPI for CPU management.

📋 TL;DR

This CVE describes a NULL pointer dereference vulnerability in the Linux kernel's ACPI subsystem for ARM64 systems. If triggered, it could cause a kernel panic leading to denial of service. The vulnerability affects ARM64 Linux systems using ACPI for CPU management.

💻 Affected Systems

Products:

Linux Kernel

Versions: Specific affected versions not explicitly stated in CVE, but patches are available in stable kernel trees

Operating Systems: Linux distributions running on ARM64 architecture with ACPI enabled

Default Config Vulnerable: ⚠️ Yes

Notes: Only affects ARM64 systems using ACPI for CPU management. Systems using Device Tree (DT) instead of ACPI are not affected.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash and denial of service, potentially requiring physical access to reboot the system.

🟠

Likely Case

System crash or kernel panic resulting in temporary denial of service until system reboot.

🟢

If Mitigated

No impact if the vulnerable code path cannot be triggered or if systems have proper isolation.

🌐 Internet-Facing: LOW - This vulnerability requires local access or ability to interact with kernel ACPI subsystem.

🏢 Internal Only: MEDIUM - Malicious local users or compromised processes could potentially trigger this vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: NO

Unauthenticated Exploit: ✅ No

Complexity: HIGH

No known public exploit exists. The vulnerability requires specific conditions to trigger and local access to the system.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patches available in stable kernel trees (commits referenced in CVE)

Vendor Advisory: https://git.kernel.org/stable/c/2488444274c70038eb6b686cba5f1ce48ebb9cdd

Restart Required: Yes

Instructions:

1. Update to a patched kernel version from your distribution vendor. 2. Rebuild kernel if compiling from source with the provided patches. 3. Reboot system to load new kernel.

🔧 Temporary Workarounds

Disable CPU hotplug

linux

Prevent CPU hotplug operations that could trigger the vulnerable code path

echo 0 > /sys/devices/system/cpu/cpuX/online (for each CPU)

🧯 If You Can't Patch

Restrict local user access to prevent potential exploitation
Implement strict process isolation and privilege separation

🔍 How to Verify

Check if Vulnerable:

Check kernel version and if running on ARM64 with ACPI enabled: 'uname -r' and check /sys/firmware/acpi/tables

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version is updated to include the patched commits: 'uname -r' and check kernel changelog

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages in /var/log/kern.log or dmesg
NULL pointer dereference errors in kernel logs

Network Indicators:

None - this is a local vulnerability

SIEM Query:

source="kernel" AND ("NULL pointer dereference" OR "kernel panic" OR "Oops")

📊 Metadata

CVE ID: CVE-2024-46822

CVSS v3 Score: 5.5 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-476

Published: September 27, 2024

Last Updated: November 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-46822, you might also want to check these: