CVE-2024-27043

media: edia: dvbdev: fix a use-after-free

State: Published
Severity: 7.8 High
Published: May 1, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: edia: dvbdev: fix a use-after-free

In dvb_register_device, *pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, *pdvbdev is not set to NULL after dvbdev's deallocation, causing use-after-frees in many places, for example, in the following call chain:

When calling dvb_unregister_device, dmxdev->dvbdev (i.e. *pdvbdev in dvb_register_device) could point to memory that had been freed in dvb_register_device. Thereafter, this pointer is transferred to kref_put and triggering a use-after-free.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b61901024776b25ce7b8edc31bb1757c7382a88e to before d0f5c28333822f9baa5280d813124920720fd856Affected b61901024776b25ce7b8edc31bb1757c7382a88e to before f20c3270f3ed5aa6919a87e4de9bf6c05fb57086Affected b61901024776b25ce7b8edc31bb1757c7382a88e to before 096237039d00c839f3e3a5fe6d001bf0db45b644Affected b61901024776b25ce7b8edc31bb1757c7382a88e to before 0d3fe80b6d175c220b3e252efc6c6777e700e98eAffected b61901024776b25ce7b8edc31bb1757c7382a88e to before 437a111f79a2f5b2a5f21e27fdec6f40c8768712Affected b61901024776b25ce7b8edc31bb1757c7382a88e to before 779e8db7efb22316c8581d6c229636d2f5694a62Affected b61901024776b25ce7b8edc31bb1757c7382a88e to before 35674111a043b0482a9bc69da8850a83f465b07dAffected b61901024776b25ce7b8edc31bb1757c7382a88e to before b7586e902128e4fb7bfbb661cb52e4215a65637bAffected b61901024776b25ce7b8edc31bb1757c7382a88e to before 8c64f4cdf4e6cc5682c52523713af8c39c94e6d5Affected
LinuxLinux	2.6.21Affected before 2.6.21Not affected 4.19.311 through 4.19.Not affected 5.4.273 through 5.4.Not affected 5.10.214 through 5.10.Not affected 5.15.153 through 5.15.Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

b61901024776b25ce7b8edc31bb1757c7382a88e to before d0f5c28333822f9baa5280d813124920720fd856Affected
b61901024776b25ce7b8edc31bb1757c7382a88e to before f20c3270f3ed5aa6919a87e4de9bf6c05fb57086Affected
b61901024776b25ce7b8edc31bb1757c7382a88e to before 096237039d00c839f3e3a5fe6d001bf0db45b644Affected
b61901024776b25ce7b8edc31bb1757c7382a88e to before 0d3fe80b6d175c220b3e252efc6c6777e700e98eAffected
b61901024776b25ce7b8edc31bb1757c7382a88e to before 437a111f79a2f5b2a5f21e27fdec6f40c8768712Affected
b61901024776b25ce7b8edc31bb1757c7382a88e to before 779e8db7efb22316c8581d6c229636d2f5694a62Affected
b61901024776b25ce7b8edc31bb1757c7382a88e to before 35674111a043b0482a9bc69da8850a83f465b07dAffected
b61901024776b25ce7b8edc31bb1757c7382a88e to before b7586e902128e4fb7bfbb661cb52e4215a65637bAffected
b61901024776b25ce7b8edc31bb1757c7382a88e to before 8c64f4cdf4e6cc5682c52523713af8c39c94e6d5Affected

LinuxLinux

2.6.21Affected
before 2.6.21Not affected
4.19.311 through 4.19.*Not affected
5.4.273 through 5.4.*Not affected
5.10.214 through 5.10.*Not affected
5.15.153 through 5.15.*Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.