CVE-2024-50267

Katalog CVE

CVSS 7.8 · High EPSS 0,28%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: fix use after free in debug printk The "dev_dbg(&urb->dev->dev, ..." which happens after usb_free_urb(urb) is a use after free of the "urb" pointer. Store the "dev" pointer at the start of the function to avoid this issue.

Rincian

Terbit di NVD

19 November 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/13d6ff3ca76056d06a9d88300be2a293442ff595 patch
• https://git.kernel.org/stable/c/275258c30bbda29467216e96fb655b16bcc9992b patch
• https://git.kernel.org/stable/c/314bdf446053e123f37543aa535197ee75f8aa97 patch
• https://git.kernel.org/stable/c/37bb5628379295c1254c113a407cab03a0f4d0b4 patch
• https://git.kernel.org/stable/c/39709ce93f5c3f9eb535efe2afea088805d1128f patch
• https://git.kernel.org/stable/c/44fff2c16c5aafbdb70c7183dae0a415ae74705e patch
• https://git.kernel.org/stable/c/e567fc8f7a4460e486e52c9261b1e8b9f5dc42aa patch
• https://git.kernel.org/stable/c/e6ceb04eeb6115d872d4c4078d12f1170ed755ce patch
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
• https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html