CVE-2024-26654 — Use After Free in Linux
Severity
7.0HIGHNVD
OSV5.5
EPSS
0.0%
top 97.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 1
Latest updateSep 18
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
The dreamcastcard->timer could schedule the spu_dma_work and the
spu_dma_work could also arm the dreamcastcard->timer.
When the snd_pcm_substream is closing, the aica_channel will be
deallocated. But it could still be dereferenced in the worker
thread. The reason is that del_timer() will return directly
regardless of whether the timer handler is running or not and
t…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9
Affected Packages5 packages
▶CVEListV5linux/linux198de43d758ca2700e2b52b49c0b189b4931466c — eeb2a2ca0b8de7e1c66afaf719529154e7dc60b2+9
Also affects: Debian Linux 10.0
Patches
🔴Vulnerability Details
25📋Vendor Advisories
24💬Community
1Bugzilla
▶