Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-49986

platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors x86_android_tablet_remove() frees the pdevs[] array, so it should not be used after calling x86_android_tablet_remove(). When platform_device_register() fails, store the pdevs[x] PTR_ERR() value into the local ret variable before calling x86_android_tablet_remove() to avoid using pdevs[] after it has been freed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5eba0141206ea521bbcfcf5067c174e825e943dd to < ba0b09a2f327319e252d8f3032019b958c0a5cd9affected
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to < aac871e493fc8809e60209d9899b1af07e9dbfc8affected
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to < f08adc5177bd4343df09033f62ab562c09ba7f7daffected
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to < 73a98cf79e4dbfa3d0c363e826c65aae089b313caffected
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to < 2fae3129c0c08e72b1fe93e61fd8fd203252094aaffected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 6.1.118 to ≤ 6.1.*unaffected
  • 6.6.55 to ≤ 6.6.*unaffected
  • 6.10.14 to ≤ 6.10.*unaffected
  • 6.11.3 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References