7.8
CVE-2024-44998
- EPSS 0.25%
- Veröffentlicht 04.09.2024 20:15:08
- Zuletzt bearbeitet 03.11.2025 23:15:47
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Unerledigt
atm: idt77252: prevent use after free in dequeue_rx()
In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereference "skb" after calling vcc->push() because the skb is released.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.12 < 4.19.321
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.283
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.225
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.166
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.107
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.48
Linux ≫ Linux Kernel Version >= 6.7 < 6.10.7
Linux ≫ Linux Kernel Version6.11 Updaterc1
Linux ≫ Linux Kernel Version6.11 Updaterc2
Linux ≫ Linux Kernel Version6.11 Updaterc3
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.163 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-416 Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
https://git.kernel.org/stable/c/09e086a5f72ea27c758b3f3b419a69000c32adc1
https://git.kernel.org/stable/c/1cece837e387c039225f19028df255df87a97c0d
https://git.kernel.org/stable/c/24cf390a5426aac9255205e9533cdd7b4235d518
https://git.kernel.org/stable/c/379a6a326514a3e2f71b674091dfb0e0e7522b55
https://git.kernel.org/stable/c/628ea82190a678a56d2ec38cda3addf3b3a6248d
https://git.kernel.org/stable/c/91b4850e7165a4b7180ef1e227733bcb41ccdf10
https://git.kernel.org/stable/c/a9a18e8f770c9b0703dab93580d0b02e199a4c79
https://git.kernel.org/stable/c/ef23c18ab88e33ce000d06a5c6aad0620f219bfd
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html