CVE-2024-49955

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49955
In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook provider cannot know that, so it will later call battery_hook_unregister() on the already unregistered battery hook, resulting in a crash. Fix this by using the list head to mark already unregistered battery hooks as already being unregistered so that they can be ignored by battery_hook_unregister().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/07b98400cb0285a6348188aa8c5ec6a2ae0551f7 Patch
https://git.kernel.org/stable/c/76959aff14a0012ad6b984ec7686d163deccdc16 Patch
https://git.kernel.org/stable/c/76fb2cbf01571926da8ecf6876cc8cb07d3f5183
https://git.kernel.org/stable/c/9f469ef1c79dac7f9ac1518643a33703918f7e13 Patch
https://git.kernel.org/stable/c/c47843a831e0eae007ad7e848d208e675ba4c132
https://git.kernel.org/stable/c/ca1fb7942a287b40659cc79551a1de54a2c2e7d5 Patch
https://git.kernel.org/stable/c/ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b Patch
https://git.kernel.org/stable/c/ce31847f109c3a5b2abdd19d7bcaafaacfde53de Patch
https://git.kernel.org/stable/c/da964de4c18199e14b961b5b2e5e6570552a313c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
History

08 Nov 2024, 16:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/76fb2cbf01571926da8ecf6876cc8cb07d3f5183 -
  • () https://git.kernel.org/stable/c/c47843a831e0eae007ad7e848d208e675ba4c132 -

07 Nov 2024, 19:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/07b98400cb0285a6348188aa8c5ec6a2ae0551f7 - () https://git.kernel.org/stable/c/07b98400cb0285a6348188aa8c5ec6a2ae0551f7 - Patch
References () https://git.kernel.org/stable/c/76959aff14a0012ad6b984ec7686d163deccdc16 - () https://git.kernel.org/stable/c/76959aff14a0012ad6b984ec7686d163deccdc16 - Patch
References () https://git.kernel.org/stable/c/9f469ef1c79dac7f9ac1518643a33703918f7e13 - () https://git.kernel.org/stable/c/9f469ef1c79dac7f9ac1518643a33703918f7e13 - Patch
References () https://git.kernel.org/stable/c/ca1fb7942a287b40659cc79551a1de54a2c2e7d5 - () https://git.kernel.org/stable/c/ca1fb7942a287b40659cc79551a1de54a2c2e7d5 - Patch
References () https://git.kernel.org/stable/c/ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b - () https://git.kernel.org/stable/c/ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b - Patch
References () https://git.kernel.org/stable/c/ce31847f109c3a5b2abdd19d7bcaafaacfde53de - () https://git.kernel.org/stable/c/ce31847f109c3a5b2abdd19d7bcaafaacfde53de - Patch
References () https://git.kernel.org/stable/c/da964de4c18199e14b961b5b2e5e6570552a313c - () https://git.kernel.org/stable/c/da964de4c18199e14b961b5b2e5e6570552a313c - Patch
First Time Linux linux Kernel
Linux
CWE CWE-672

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ACPI: batería: se corrige un posible fallo al anular el registro de un gancho de batería Cuando un gancho de batería devuelve un error al añadir una batería nueva, el gancho de batería se anula automáticamente el registro. Sin embargo, el proveedor del gancho de batería no puede saberlo, por lo que más tarde llamará a battery_hook_unregister() en el gancho de batería ya anulado, lo que provocará un fallo. Solucione esto utilizando el encabezado de lista para marcar los ganchos de batería ya anulados como ya anulados para que battery_hook_unregister() pueda ignorarlos.

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 18:15

Updated : 2024-11-08 16:15

NVD link : CVE-2024-49955

Mitre link : CVE-2024-49955

CVE.ORG link : CVE-2024-49955

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-672

Operation on a Resource after Expiration or Release