CVE-2024-50027

Katalog CVE

CVSS 5.5 · Medium EPSS 0,25%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Free tzp copy along with the thermal zone The object pointed to by tz->tzp may still be accessed after being freed in thermal_zone_device_unregister(), so move the freeing of it to the point after the removal completion has been completed at which it cannot be accessed any more.

Rincian

Terbit di NVD

21 Oktober 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/827a07525c099f54d3b15110408824541ec66b3c patch
• https://git.kernel.org/stable/c/bdb0d40507c85bee33c2a71fde7b2e857346f112 patch
• https://git.kernel.org/stable/c/eabe285e1c629a719d6e68fc319939c63b83bf22