CVE-2024-42280

mISDN: Fix a use after free in hfcmulti_tx()

State: Published
Severity: 7.8 High
Published: Aug 17, 2024
Updated: Aug 5, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

mISDN: Fix a use after free in hfcmulti_tx()

Don't dereference *sp after calling dev_kfree_skb(*sp).

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 70db2c84631f50e02e6b32b543700699dd395803Affected af69fb3a8ffa37e986db00ed93099dc44babeef4 to before d3e4d4a98c5629ccdcb762a0ff6c82ba9738a0c3Affected af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 9460ac3dd1ae033bc2b021a458fb535a0c36ddb2Affected af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 8f4030277dfb9dbe04fd78566b19931097c9d629Affected af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 4d8b642985ae24f4b3656438eb8489834a17bb80Affected af69fb3a8ffa37e986db00ed93099dc44babeef4 to before ddc79556641ee070d36be0de4a1f0a16a71f1fc7Affected af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 7e4a539bca7d8d20f2c5d93c18cce8ef77cd78e0Affected af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 61ab751451f5ebd0b98e02276a44e23a10110402Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 4.19.320 through 4.19.Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 70db2c84631f50e02e6b32b543700699dd395803Affected
af69fb3a8ffa37e986db00ed93099dc44babeef4 to before d3e4d4a98c5629ccdcb762a0ff6c82ba9738a0c3Affected
af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 9460ac3dd1ae033bc2b021a458fb535a0c36ddb2Affected
af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 8f4030277dfb9dbe04fd78566b19931097c9d629Affected
af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 4d8b642985ae24f4b3656438eb8489834a17bb80Affected
af69fb3a8ffa37e986db00ed93099dc44babeef4 to before ddc79556641ee070d36be0de4a1f0a16a71f1fc7Affected
af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 7e4a539bca7d8d20f2c5d93c18cce8ef77cd78e0Affected
af69fb3a8ffa37e986db00ed93099dc44babeef4 to before 61ab751451f5ebd0b98e02276a44e23a10110402Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
4.19.320 through 4.19.*Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.