CVE-2024-44998

atm: idt77252: prevent use after free in dequeue_rx()

State: Published
Severity: 9.8 Critical
Published: Sep 4, 2024
Updated: Aug 5, 2026
Reserved: Aug 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

atm: idt77252: prevent use after free in dequeue_rx()

We can't dereference "skb" after calling vcc->push() because the skb is released.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 628ea82190a678a56d2ec38cda3addf3b3a6248dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 09e086a5f72ea27c758b3f3b419a69000c32adc1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1cece837e387c039225f19028df255df87a97c0dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 24cf390a5426aac9255205e9533cdd7b4235d518Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 379a6a326514a3e2f71b674091dfb0e0e7522b55Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ef23c18ab88e33ce000d06a5c6aad0620f219bfdAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 91b4850e7165a4b7180ef1e227733bcb41ccdf10Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a9a18e8f770c9b0703dab93580d0b02e199a4c79Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.19.321 through 4.19.Not affected 5.4.283 through 5.4.Not affected 5.10.225 through 5.10.Not affected 5.15.166 through 5.15.Not affected 6.1.107 through 6.1.Not affected 6.6.48 through 6.6.Not affected 6.10.7 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 628ea82190a678a56d2ec38cda3addf3b3a6248dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 09e086a5f72ea27c758b3f3b419a69000c32adc1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1cece837e387c039225f19028df255df87a97c0dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 24cf390a5426aac9255205e9533cdd7b4235d518Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 379a6a326514a3e2f71b674091dfb0e0e7522b55Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ef23c18ab88e33ce000d06a5c6aad0620f219bfdAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 91b4850e7165a4b7180ef1e227733bcb41ccdf10Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a9a18e8f770c9b0703dab93580d0b02e199a4c79Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.19.321 through 4.19.*Not affected
5.4.283 through 5.4.*Not affected
5.10.225 through 5.10.*Not affected
5.15.166 through 5.15.*Not affected
6.1.107 through 6.1.*Not affected
6.6.48 through 6.6.*Not affected
6.10.7 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.