CVE-2024-57979

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sys_exit() from gpsd when rebooting: pps pps1: removed ------------[ cut here ]------------ kobject: '(null)' (00000000db4bec24): is not initialized, yet kobject_put() is being called. WARNING: CPU: 2 PID: 440 at lib/kobject.c:734 kobject_put+0x120/0x150 CPU: 2 UID: 299 PID: 440 Comm: gpsd Not tainted 6.11.0-rc6-00308-gb31c44928842 #1 Hardware name: Raspberry Pi 4 Model B Rev 1.1 (DT) pstate: 60000005 (nZCv daif -PAN -UAO -...

Affected product and versions

Product

Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Affected versions

>= d953e0e837e65ecc1ddaa4f9560f7925878a0de6 < 785c78ed0d39d1717cca3ef931d3e51337b5e90e, >= d953e0e837e65ecc1ddaa4f9560f7925878a0de6 < 1a7735ab2cb9747518a7416fb5929e85442dec62, >= d953e0e837e65ecc1ddaa4f9560f7925878a0de6 < c4041b6b0a7a3def8cf3f3d6120ff337bc4c40f7, >= d953e0e837e65ecc1ddaa4f9560f7925878a0de6 < 91932db1d96b2952299ce30c1c693d834d10ace6, >= d953e0e837e65ecc1ddaa4f9560f7925878a0de6 < cd3bbcb6b3a7caa5ce67de76723b6d8531fb7f64, >= d953e0e837e65ecc1ddaa4f9560f7925878a0de6 < 7e5ee3281dc09014367f5112b6d566ba36ea2d49, >= d953e0e837e65ecc1ddaa4f9560f7925878a0de6 < 85241f7de216f8298f6e48540ea13d7dcd100870, >= d953e0e837e65ecc1ddaa4f9560f7925878a0de6 < c79a39dc8d060b9e64e8b0fa9d245d44befeefbe, >= 77327a71f9841b7dfa708195d1cb133d4ef4a989, >= cd59fb14918a6b20c1ac8be121fa6397b97b00cb, >= 49626fbb0360332e40fd76a48cb2ba876d6134ad, >= 3.2.40 < 3.3, >= 3.4.87 < 3.5, >= 3.8.1 < 3.9, >= 3.9, >= V3.1.6, >= 3.8.1 < 5.4.291, >= 5.5 < 5.10.235, >= 5.11 < 5.15.179, >= 5.16 < 6.1.129

Fixed versions

3.3, 3.5, 5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.76, 6.12.13, 6.13.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416