5.5

CVE-2024-49955

ACPI: battery: Fix possible crash when unregistering a battery hook

In the Linux kernel, the following vulnerability has been resolved:

ACPI: battery: Fix possible crash when unregistering a battery hook

When a battery hook returns an error when adding a new battery, then
the battery hook is automatically unregistered.
However the battery hook provider cannot know that, so it will later
call battery_hook_unregister() on the already unregistered battery
hook, resulting in a crash.

Fix this by using the list head to mark already unregistered battery
hooks as already being unregistered so that they can be ignored by
battery_hook_unregister().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 4.17 < 5.10.227
LinuxLinux Kernel Version >= 5.11 < 5.15.168
LinuxLinux Kernel Version >= 5.16 < 6.1.113
LinuxLinux Kernel Version >= 6.2 < 6.6.55
LinuxLinux Kernel Version >= 6.7 < 6.10.14
LinuxLinux Kernel Version >= 6.11 < 6.11.3
LinuxLinux Kernel Version6.12 Updaterc1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.255
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-672 Operation on a Resource after Expiration or Release

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

https://git.kernel.org/stable/c/07b98400cb0285a6348188aa8c5ec6a2ae0551f7
Patch
https://git.kernel.org/stable/c/76959aff14a0012ad6b984ec7686d163deccdc16
Patch
https://git.kernel.org/stable/c/76fb2cbf01571926da8ecf6876cc8cb07d3f5183
https://git.kernel.org/stable/c/9f469ef1c79dac7f9ac1518643a33703918f7e13
Patch
https://git.kernel.org/stable/c/c47843a831e0eae007ad7e848d208e675ba4c132
https://git.kernel.org/stable/c/ca1fb7942a287b40659cc79551a1de54a2c2e7d5
Patch
https://git.kernel.org/stable/c/ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b
Patch
https://git.kernel.org/stable/c/ce31847f109c3a5b2abdd19d7bcaafaacfde53de
Patch
https://git.kernel.org/stable/c/da964de4c18199e14b961b5b2e5e6570552a313c
Patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-355557.html