CVE-2024-49982
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
aoe: fix the potential use-after-free problem in more places
In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e92662 ("aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts") makes tx() calling dev_put() instead of doing in aoecmd_cfg_pkts(). It avoids that the tx() runs into use-after-free. Then Nicolai Stange found more places in aoe have potential use-after-free problem with tx(). e.g. revalidate(), aoecmd_ata_rw(), resend(), probe() and aoecmd_cfg_rsp(). Those functions also use aoenet_xmit() to push packet to tx queue. So they should also use dev_hold() to increase the refcnt of skb->dev. On the other hand, moving dev_put() to tx() causes that the refcnt of skb->dev be reduced to a negative value, because corresponding dev_hold() are not called in revalidate(), aoecmd_ata_rw(), resend(), probe(), and aoecmd_cfg_rsp(). This patch fixed this issue.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| ad80c34944d7175fa1f5c7a55066020002921a99 | affected | git | 12f7b89dd72b25da4eeaa22097877963cad6418e | Unavailable | None listed |
| 1a54aa506b3b2f31496731039e49778f54eee881 | affected | git | a786265aecf39015418e4f930cc1c14603a01490 | Unavailable | None listed |
| faf0b4c5e00bb680e8e43ac936df24d3f48c8e65 | affected | git | f63461af2c1a86af4217910e47a5c46e3372e645 | Unavailable | None listed |
| 7dd09fa80b0765ce68bfae92f4e2f395ccf0fba4 | affected | git | 07b418d50ccbbca7e5d87a3a0d41d436cefebf79 | Unavailable | None listed |
| 74ca3ef68d2f449bc848c0a814cefc487bf755fa | affected | git | bc2cbf7525ac288e07d465f5a1d8cb8fb9599254 | Unavailable | None listed |
| eb48680b0255a9e8a9bdc93d6a55b11c31262e62 | affected | git | acc5103a0a8c200a52af7d732c36a8477436a3d3 | Unavailable | None listed |
| f98364e926626c678fb4b9004b75cacf92ff0662 | affected | git | 89d9a69ae0c667e4d9d028028e2dcc837bae626f | Unavailable | None listed |
| f98364e926626c678fb4b9004b75cacf92ff0662 | affected | git | 8253a60c89ec35c8f36fb2cc08cdf854c7a3eb58 | Unavailable | None listed |
| f98364e926626c678fb4b9004b75cacf92ff0662 | affected | git | 6d6e54fc71ad1ab0a87047fd9c211e75d86084a3 | Unavailable | None listed |
| 079cba4f4e307c69878226fdf5228c20aa1c969c | affected | git | Unavailable | Unavailable | None listed |
| a16fbb80064634b254520a46395e36b87ca4731e | affected | git | Unavailable | Unavailable | None listed |
| 4.19.311 | affected | semver | 4.19.323 | Unavailable | None listed |
| 5.4.273 | affected | semver | 5.4.285 | Unavailable | None listed |
| 5.10.214 | affected | semver | 5.10.227 | Unavailable | None listed |
| 5.15.153 | affected | semver | 5.15.168 | Unavailable | None listed |
| 6.1.83 | affected | semver | 6.1.113 | Unavailable | None listed |
| 6.6.23 | affected | semver | 6.6.55 | Unavailable | None listed |
| 6.7.11 | affected | semver | 6.8 | Unavailable | None listed |
| 6.8.2 | affected | semver | 6.9 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.9 | Unavailable | None listed |
| 4.19.323 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.285 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.227 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.168 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.113 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.55 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.10.14 | unaffected | semver | Unavailable | 6.10.* | None listed |
| 6.11.3 | unaffected | semver | Unavailable | 6.11.* | None listed |
| 6.12 | unaffected | original_commit_for_fix | Unavailable | * | None listed |