CVE-2024-49925

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UAF race during unregistering where the sysctl attributes were usable after the info struct was freed.

Reserved 2024-10-21 | Published 2024-10-21 | Updated 2024-11-19 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f4 before 36bfefb6baaa
affected

1da177e4c3f4 before 872cd2d029d2
affected

1da177e4c3f4 before 4684d69b9670
affected

1da177e4c3f4 before 95cdd538e0e5
affected

Default status
affected

6.6.55
unaffected

6.10.14
unaffected

6.11.3
unaffected

6.12
unaffected

References

git.kernel.org/...c/36bfefb6baaa8e46de44f4fd919ce4347337620f

git.kernel.org/...c/872cd2d029d2c970a8a1eea88b48dab2b3f2e93a

git.kernel.org/...c/4684d69b9670a83992189f6271dc0fcdec4ed0d7

git.kernel.org/...c/95cdd538e0e5677efbdf8aade04ec098ab98f457

cve.org (CVE-2024-49925)

nvd.nist.gov (CVE-2024-49925)

Download JSON