CVE-2024-49925

fbdev: efifb: Register sysfs groups through driver core

State: Published
Severity: 7.1 High
Published: Oct 21, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: efifb: Register sysfs groups through driver core

The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup.

Also avoid a UAF race during unregistering where the sysctl attributes were usable after the info struct was freed.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	753375a881caa01112b7cec2c796749154e0bb23 to before 2d97b85eb5a86766ad0f8ea3d121e6ae144e3ed8Affected 753375a881caa01112b7cec2c796749154e0bb23 to before 2a9c40c72097b583b23aeb2a26d429ccfc81fbc1Affected 753375a881caa01112b7cec2c796749154e0bb23 to before 36bfefb6baaa8e46de44f4fd919ce4347337620fAffected 753375a881caa01112b7cec2c796749154e0bb23 to before 872cd2d029d2c970a8a1eea88b48dab2b3f2e93aAffected 753375a881caa01112b7cec2c796749154e0bb23 to before 4684d69b9670a83992189f6271dc0fcdec4ed0d7Affected 753375a881caa01112b7cec2c796749154e0bb23 to before 95cdd538e0e5677efbdf8aade04ec098ab98f457Affected
LinuxLinux	4.10Affected before 4.10Not affected 5.15.209 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.10.14 through 6.10.Not affected 6.11.3 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

753375a881caa01112b7cec2c796749154e0bb23 to before 2d97b85eb5a86766ad0f8ea3d121e6ae144e3ed8Affected
753375a881caa01112b7cec2c796749154e0bb23 to before 2a9c40c72097b583b23aeb2a26d429ccfc81fbc1Affected
753375a881caa01112b7cec2c796749154e0bb23 to before 36bfefb6baaa8e46de44f4fd919ce4347337620fAffected
753375a881caa01112b7cec2c796749154e0bb23 to before 872cd2d029d2c970a8a1eea88b48dab2b3f2e93aAffected
753375a881caa01112b7cec2c796749154e0bb23 to before 4684d69b9670a83992189f6271dc0fcdec4ed0d7Affected
753375a881caa01112b7cec2c796749154e0bb23 to before 95cdd538e0e5677efbdf8aade04ec098ab98f457Affected

LinuxLinux

4.10Affected
before 4.10Not affected
5.15.209 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.55 through 6.6.*Not affected
6.10.14 through 6.10.*Not affected
6.11.3 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.