CVE-2024-43830

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate() callback and freed by the deactivate() callback. Calling device_remove_groups() after calling deactivate() leaves a window where the sysfs attributes show/store functions could be called after deactivation and then operate on the just freed trigger-data. Move the device_remove_groups() call to before deactivate() to close this ra...

Affected product and versions

Product

Linux Linux, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, linux kernel

Affected versions

>= a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 < c3b7a650c8717aa89df318364609c86cbc040156, >= a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 < d1415125b701ef13370e2761f691ec632a5eb93a, >= a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 < 09c1583f0e10c918855d6e7540a79461a353e5d6, >= a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 < 3fb6a9d67cfd812a547ac73ec02e1077c26c640d, >= a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 < 734ba6437e80dfc780e9ee9d95f912392d12b5ea, >= a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 < cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374, >= a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 < 0788a6f3523d3686a9eed5ea1e6fcce6841277b2, >= a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 < c0dc9adf9474ecb7106e60e5472577375aedaed3, >= 4.19, >= 4.19 < 4.19.320, >= 4.20 < 5.4.282, >= 5.5 < 5.10.224, >= 5.11 < 5.15.165, >= 5.16 < 6.1.103, >= 6.2 < 6.6.44, >= 6.7 < 6.10.3

Fixed versions

4.19.320, 5.4.282, 5.10.224, 5.15.165, 6.1.103, 6.6.44, 6.10.3

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416