Riskcovery

CVE-2024-49986

platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors

State
Published
Severity
7.8 High
Published
Oct 21, 2024
Updated
Aug 5, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors

x86_android_tablet_remove() frees the pdevs[] array, so it should not be used after calling x86_android_tablet_remove().

When platform_device_register() fails, store the pdevs[x] PTR_ERR() value into the local ret variable before calling x86_android_tablet_remove() to avoid using pdevs[] after it has been freed.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to before ba0b09a2f327319e252d8f3032019b958c0a5cd9Affected
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to before aac871e493fc8809e60209d9899b1af07e9dbfc8Affected
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to before f08adc5177bd4343df09033f62ab562c09ba7f7dAffected
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to before 73a98cf79e4dbfa3d0c363e826c65aae089b313cAffected
  • 5eba0141206ea521bbcfcf5067c174e825e943dd to before 2fae3129c0c08e72b1fe93e61fd8fd203252094aAffected
LinuxLinux
  • 5.17Affected
  • before 5.17Not affected
  • 6.1.118 through 6.1.*Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.