Riskcovery

CVE-2024-49945

net/ncsi: Disable the ncsi work before freeing the associated structure

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
Oct 30, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/ncsi: Disable the ncsi work before freeing the associated structure

The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before 6a921089feeef364169a34a7e5a3968138c00c7fAffected
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before 64704f231d5dee8639e256507178f43dde1f131cAffected
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before f6ca58696749268181f43150b3553f2bafd71e42Affected
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before dd41dab62f32d9e9e0669af8459d12a93834b238Affected
  • 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before a0ffa68c70b367358b2672cdab6fa5bc4c40de2cAffected
LinuxLinux
  • 4.8Affected
  • before 4.8Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.