CVE-2024-56549 is a vulnerability in the Linux kernel's cachefiles subsystem where a NULL pointer dereference occurs in object->file during ondemand-mode operations. This happens due to inconsistent lifetime management between the allocated file descriptor and object->file, leading to a NULL pointer dereference when user-space invokes anon_fd using object->file. The issue is triggered in a sequence involving write operations and unmounting, resulting in a potential denial of service. The vulnerability has a medium severity with a CVSS score of 5.5.