CVE-2024-56587 is a Linux kernel vulnerability involving a NULL pointer dereference in the leds class subsystem. The issue arises when concurrent processes access led_cdev attributes without proper synchronization, leading to a potential kernel crash. The flaw is due to missing mutex protection around brightness_show() and related functions. This vulnerability has been fixed by adding mutex protection to prevent concurrent access to led_cdev structures.