Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-49945

net/ncsi: Disable the ncsi work before freeing the associated structure

Description

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to < 6a921089feeef364169a34a7e5a3968138c00c7faffected
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to < 64704f231d5dee8639e256507178f43dde1f131caffected
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to < f6ca58696749268181f43150b3553f2bafd71e42affected
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to < dd41dab62f32d9e9e0669af8459d12a93834b238affected
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to < a0ffa68c70b367358b2672cdab6fa5bc4c40de2caffected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.10.14 to ≤ 6.10.*unaffected
  • 6.11.3 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References