cbcvebase.
CVE-2024-54458
published 2025-02-27

CVE-2024-54458: In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not cause any…

PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.23%
13.9th percentile
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not cause any issues, but I believe it is necessary to set bsg_queue to NULL after removing it to prevent potential use-after-free (UAF) access.

Affected

22 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
debianlinux-6.1< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
linuxlinux
linuxlinux>= df032bf27a414acf61c957ec2fad22a57d903b39 < bb4783c670180b922267222408e1c48d22dfbb46bb4783c670180b922267222408e1c48d22dfbb46
linuxlinux>= df032bf27a414acf61c957ec2fad22a57d903b39 < 22018622e1e9e371198dbd983af946a844d5924c22018622e1e9e371198dbd983af946a844d5924c
linuxlinux>= df032bf27a414acf61c957ec2fad22a57d903b39 < 5e7b6e44468c3242c21c2a8656d009fb3eb50a735e7b6e44468c3242c21c2a8656d009fb3eb50a73
linuxlinux>= df032bf27a414acf61c957ec2fad22a57d903b39 < 5f782d4741bf558def60df192b858b0efc6a5f0a5f782d4741bf558def60df192b858b0efc6a5f0a
linuxlinux>= df032bf27a414acf61c957ec2fad22a57d903b39 < 88a01e9c9ad40c075756ba93b47984461d4ff15d88a01e9c9ad40c075756ba93b47984461d4ff15d
linuxlinux>= df032bf27a414acf61c957ec2fad22a57d903b39 < 9193bdc170cc23fe98aca71d1a63c0bf6e1e853b9193bdc170cc23fe98aca71d1a63c0bf6e1e853b
linuxlinux>= df032bf27a414acf61c957ec2fad22a57d903b39 < 1e95c798d8a7f70965f0f88d4657b682ff0ec75f1e95c798d8a7f70965f0f88d4657b682ff0ec75f
linuxlinux_kernel< 6.1.1296.1.129
linuxlinux_kernel>= 0 < 5.10.237-15.10.237-1
linuxlinux_kernel>= 0 < 6.1.129-16.1.129-1
linuxlinux_kernel>= 0 < 6.12.16-16.12.16-1
linuxlinux_kernel>= 0 < 6.12.16-16.12.16-1
linuxlinux_kernel>= 0 < 5.15.0-144.1575.15.0-144.157
linuxlinux_kernel>= 0 < 6.8.0-78.786.8.0-78.78
linuxlinux_kernel>= 6.13 < 6.13.46.13.4
linuxlinux_kernel>= 6.2 < 6.6.796.6.79
linuxlinux_kernel>= 6.7 < 6.12.166.12.16
msrcazl3_kernel_6.6.78.1-3_on_azure_linux_3.0
msrccbl2_kernel_5.15.182.1-1_on_cbl_mariner_2.0

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian7.8HIGH
vendor_msrc7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.