Review reviewHigh

CVE-2024-50055

Linux Linux, debian linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() For bus_register(), any error which happens after kset_register() will cause that @priv are freed twice, fixed by setting @priv with NULL after the first free.

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2024.10.22

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, debian linux, linux kernel
Affected versions: >= 3465e2e4a24eef9bc9f21aa29d83fd7000c1da48 < d885c464c25018b81a6b58f5d548fc2e3ef87dd1, >= 3465e2e4a24eef9bc9f21aa29d83fd7000c1da48 < 9ce15f68abedfae7ae0a35e95895aeddfd0f0c6a, >= 3465e2e4a24eef9bc9f21aa29d83fd7000c1da48 < bfa54a793ba77ef696755b66f3ac4ed00c7d1248, >= 6.3, 11.0, < 5.4.291, >= 5.5 < 5.10.231, >= 5.11 < 5.15.174, >= 5.16 < 6.1.120, >= 6.2 < 6.6.57, >= 6.7 < 6.11.4
Fixed versions: 5.4.291, 5.10.231, 5.15.174, 6.1.120, 6.6.57, 6.11.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, debian linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-415