In the Linux kernel, the following vulnerability has been resolved:
net/ncsi: Disable the ncsi work before freeing the associated structure
The work function can run after the ncsi device is freed, resulting
in use-after-free bugs or kernel panic.
References
Configurations
Configuration 1 (hide)
|
History
01 Nov 2024, 14:52
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux
Linux linux Kernel |
|
| References | () https://git.kernel.org/stable/c/a0ffa68c70b367358b2672cdab6fa5bc4c40de2c - Patch | |
| References | () https://git.kernel.org/stable/c/f6ca58696749268181f43150b3553f2bafd71e42 - Patch | |
| References | () https://git.kernel.org/stable/c/dd41dab62f32d9e9e0669af8459d12a93834b238 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| CWE | CWE-416 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
21 Oct 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-21 18:15
Updated : 2024-11-01 14:52
NVD link : CVE-2024-49945
Mitre link : CVE-2024-49945
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free