SECUFOCUSNOW
Home›CVE index›CVE-2024-53165
Review reviewHigh

CVE-2024-53165

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let's only add it to the list after everything has succeeded.

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.12.27
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let's only add it to the list after everything has succeeded.

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < 3c7c806b3eafd94ae0f77305a174d63b69ec187c, >= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc, >= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < 971b4893457788e0e123ea552f0bb126a5300e61, >= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < c3f4f4547fb291982f5ef56c048277c4d5ccc4e4, >= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < c43df7dae28fb9fce96ef088250c1e3c3a77c527, >= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < b8b84dcdf3ab1d414304819f824b10efba64132c, >= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < 6ba6e19912570b2ad68298be0be1dc779014a303, >= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < 588bdec1ff8b81517dbae0ae51c9df52c0b952d3, >= 2dcec7a988a1895540460a0bf5603bab63d5a3ed < 63e72e551942642c48456a4134975136cdcb9b3c, >= 2.6.30, >= 2.6.30 < 4.19.325, >= 4.20 < 5.4.287, >= 5.5 < 5.10.231, >= 5.11 < 5.15.174, >= 5.16 < 6.1.120, >= 6.2 < 6.6.64, >= 6.7 < 6.11.11, >= 6.12 < 6.12.2
Fixed versions
4.19.325, 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.64, 6.11.11, 6.12.2

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416
CVE-2024-53165 — Linux Linux, linux kernel | SECUFOCUS NOW