CVE-2024-49945

Published: Oct 21, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.

Affected (3)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.8 to 6.10.14
Linux Linux Kernel	From 6.11 to 6.11.3
Linux Linux Kernel	Version 6.12 rc1

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (3)

https://git.kernel.org/stable/c/a0ffa68c70b367358b2672cdab6fa5bc4c40de2c

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/dd41dab62f32d9e9e0669af8459d12a93834b238

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/f6ca58696749268181f43150b3553f2bafd71e42

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

Timeline

No history available yet.