CVE-2024-49981 (GCVE-0-2024-49981)
Vulnerability from cvelistv5
Published
2024-10-21 18:02
Modified
2026-08-05 11:40
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venus_remove due to race condition in venus_probe, core->work is bound with venus_sys_error_handler, which is used to handle error. The code use core->sys_err_done to make sync work. The core->work is started in venus_event_notify. If we call venus_remove, there might be an unfished work. The possible sequence is as follows: CPU0 CPU1 |venus_sys_error_handler venus_remove | hfi_destroy | venus_hfi_destroy | kfree(hdev); | |hfi_reinit |venus_hfi_queues_reinit |//use hdev Fix it by canceling the work in venus_remove.
References
Impacted products
Vendor Product Version
Linux Linux Version: af2c3834c8ca7cc65d15592ac671933df8848115
Version: af2c3834c8ca7cc65d15592ac671933df8848115
Version: af2c3834c8ca7cc65d15592ac671933df8848115
Version: af2c3834c8ca7cc65d15592ac671933df8848115
Version: af2c3834c8ca7cc65d15592ac671933df8848115
Version: af2c3834c8ca7cc65d15592ac671933df8848115
Version: af2c3834c8ca7cc65d15592ac671933df8848115
Version: af2c3834c8ca7cc65d15592ac671933df8848115
Version: af2c3834c8ca7cc65d15592ac671933df8848115
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-49981",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:32:30.301335Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:38:44.376Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:24:00.609Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/platform/qcom/venus/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5098b9e6377577fe13d03e1d8914930f014a3314",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            },
            {
              "lessThan": "63bbe26471ebdcc3c20bb4cc3950d666279ad658",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            },
            {
              "lessThan": "60b6968341a6dd5353554f3e72db554693a128a5",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            },
            {
              "lessThan": "bf6be32e2d39f6301ff1831e249d32a8744ab28a",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            },
            {
              "lessThan": "2a541fcc0bd2b05a458e9613376df1289ec11621",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            },
            {
              "lessThan": "b0686aedc5f1343442d044bd64eeac7e7a391f4e",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            },
            {
              "lessThan": "d925e9f7fb5a2dbefd1a73fc01061f38c7becd4c",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            },
            {
              "lessThan": "10941d4f99a5a34999121b314afcd9c0a1c14f15",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            },
            {
              "lessThan": "c5a85ed88e043474161bbfe54002c89c1cb50ee2",
              "status": "affected",
              "version": "af2c3834c8ca7cc65d15592ac671933df8848115",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/platform/qcom/venus/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.13"
            },
            {
              "lessThan": "4.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.323",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.285",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.227",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.323",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.285",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.227",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.168",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.113",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.55",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.14",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.3",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: venus: fix use after free bug in venus_remove due to race condition\n\nin venus_probe, core-\u003ework is bound with venus_sys_error_handler, which is\nused to handle error. The code use core-\u003esys_err_done to make sync work.\nThe core-\u003ework is started in venus_event_notify.\n\nIf we call venus_remove, there might be an unfished work. The possible\nsequence is as follows:\n\nCPU0                  CPU1\n\n                     |venus_sys_error_handler\nvenus_remove         |\nhfi_destroy\t \t\t |\nvenus_hfi_destroy\t |\nkfree(hdev);\t     |\n                     |hfi_reinit\n\t\t\t\t\t |venus_hfi_queues_reinit\n                     |//use hdev\n\nFix it by canceling the work in venus_remove."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The Venus video accelerator is a DT platform device driven locally via `/dev/video*` V4L2 nodes and driver bind/unbind; there is no network-facing path to `venus_remove()` or to the HFI sys-error handler. Exploitation requires local access to the affected system.\nAC:L - The attacker influences both sides of the race: firmware `SYS_ERROR`/watchdog events can be provoked by feeding malformed bitstreams through the decoder, and the recovery-failure path re-schedules `core-\u003ework` every 10 ms indefinitely, so the work is essentially always pending when teardown runs. The race window is therefore repeatable and reliably winnable rather than depending on conditions outside the attacker\u0027s control.\nPR:L - An unprivileged local user with access to the V4L2 decoder/encoder nodes (the `video` group on desktops, the mediacodec sandbox on Android) supplies the racing sys-error side that arms and re-arms the vulnerable work item. Consistent with how the same driver-remove race class is scored elsewhere in this subsystem, no root-equivalent privilege is treated as required.\nUI:N - No victim action is needed \u2014 the sys-error work is armed by the attacker\u0027s own decode activity and fires asynchronously from the workqueue. Nothing must be opened, mounted, or confirmed by another user.\nS:U - The use-after-free corrupts kernel heap memory within the same kernel security authority; there is no guest-to-host, IOMMU, or sandbox boundary crossed. Standard kernel-local memory corruption.\nC:H - The freed `struct venus_hfi_device` is a generic kmalloc object that can be reclaimed with attacker-sprayed data, and `venus_hfi_queues_reinit()` dereferences pointers read out of it (`hdev-\u003eifaceq_table.kva`, `queues[i].qhdr`). This yields a controlled-pointer read/write primitive usable to disclose arbitrary kernel memory.\nI:H - `venus_hfi_queues_reinit()` performs repeated writes through `hdev-\u003eifaceq_table.kva` (`tbl_hdr-\u003eversion/size/num_q`, `venus_set_qhdr_defaults(queue-\u003eqhdr)`, `queue-\u003eqhdr-\u003estart_addr`) after the object is freed, giving an attacker-controlled arbitrary kernel write once the slab is reclaimed. Combined with the corrupted `hdev-\u003elock`, this is exploitable for control-flow hijack and privilege escalation.\nA:H - Even unexploited, the use-after-free (or the `core-\u003epriv = NULL` NULL dereference in the same window) causes a kernel oops/panic in the workqueue context, taking down the system. Any UAF of this kind is a reliable denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:40:50.454Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5098b9e6377577fe13d03e1d8914930f014a3314"
        },
        {
          "url": "https://git.kernel.org/stable/c/63bbe26471ebdcc3c20bb4cc3950d666279ad658"
        },
        {
          "url": "https://git.kernel.org/stable/c/60b6968341a6dd5353554f3e72db554693a128a5"
        },
        {
          "url": "https://git.kernel.org/stable/c/bf6be32e2d39f6301ff1831e249d32a8744ab28a"
        },
        {
          "url": "https://git.kernel.org/stable/c/2a541fcc0bd2b05a458e9613376df1289ec11621"
        },
        {
          "url": "https://git.kernel.org/stable/c/b0686aedc5f1343442d044bd64eeac7e7a391f4e"
        },
        {
          "url": "https://git.kernel.org/stable/c/d925e9f7fb5a2dbefd1a73fc01061f38c7becd4c"
        },
        {
          "url": "https://git.kernel.org/stable/c/10941d4f99a5a34999121b314afcd9c0a1c14f15"
        },
        {
          "url": "https://git.kernel.org/stable/c/c5a85ed88e043474161bbfe54002c89c1cb50ee2"
        }
      ],
      "title": "media: venus: fix use after free bug in venus_remove due to race condition",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-49981",
    "datePublished": "2024-10-21T18:02:27.142Z",
    "dateReserved": "2024-10-21T12:17:06.052Z",
    "dateUpdated": "2026-08-05T11:40:50.454Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:24:00.609Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-49981\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-22T13:32:30.301335Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-22T13:32:33.434Z\"}}], \"cna\": {\"title\": \"media: venus: fix use after free bug in venus_remove due to race condition\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"5098b9e6377577fe13d03e1d8914930f014a3314\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"63bbe26471ebdcc3c20bb4cc3950d666279ad658\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"60b6968341a6dd5353554f3e72db554693a128a5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"bf6be32e2d39f6301ff1831e249d32a8744ab28a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"2a541fcc0bd2b05a458e9613376df1289ec11621\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"b0686aedc5f1343442d044bd64eeac7e7a391f4e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"d925e9f7fb5a2dbefd1a73fc01061f38c7becd4c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"10941d4f99a5a34999121b314afcd9c0a1c14f15\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"af2c3834c8ca7cc65d15592ac671933df8848115\", \"lessThan\": \"c5a85ed88e043474161bbfe54002c89c1cb50ee2\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/media/platform/qcom/venus/core.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.13\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.13\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.323\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.285\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.227\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.168\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.113\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.55\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.14\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/media/platform/qcom/venus/core.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/5098b9e6377577fe13d03e1d8914930f014a3314\"}, {\"url\": \"https://git.kernel.org/stable/c/63bbe26471ebdcc3c20bb4cc3950d666279ad658\"}, {\"url\": \"https://git.kernel.org/stable/c/60b6968341a6dd5353554f3e72db554693a128a5\"}, {\"url\": \"https://git.kernel.org/stable/c/bf6be32e2d39f6301ff1831e249d32a8744ab28a\"}, {\"url\": \"https://git.kernel.org/stable/c/2a541fcc0bd2b05a458e9613376df1289ec11621\"}, {\"url\": \"https://git.kernel.org/stable/c/b0686aedc5f1343442d044bd64eeac7e7a391f4e\"}, {\"url\": \"https://git.kernel.org/stable/c/d925e9f7fb5a2dbefd1a73fc01061f38c7becd4c\"}, {\"url\": \"https://git.kernel.org/stable/c/10941d4f99a5a34999121b314afcd9c0a1c14f15\"}, {\"url\": \"https://git.kernel.org/stable/c/c5a85ed88e043474161bbfe54002c89c1cb50ee2\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmedia: venus: fix use after free bug in venus_remove due to race condition\\n\\nin venus_probe, core-\u003ework is bound with venus_sys_error_handler, which is\\nused to handle error. The code use core-\u003esys_err_done to make sync work.\\nThe core-\u003ework is started in venus_event_notify.\\n\\nIf we call venus_remove, there might be an unfished work. The possible\\nsequence is as follows:\\n\\nCPU0                  CPU1\\n\\n                     |venus_sys_error_handler\\nvenus_remove         |\\nhfi_destroy\\t \\t\\t |\\nvenus_hfi_destroy\\t |\\nkfree(hdev);\\t     |\\n                     |hfi_reinit\\n\\t\\t\\t\\t\\t |venus_hfi_queues_reinit\\n                     |//use hdev\\n\\nFix it by canceling the work in venus_remove.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.323\", \"versionStartIncluding\": \"4.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.285\", \"versionStartIncluding\": \"4.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.227\", \"versionStartIncluding\": \"4.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.168\", \"versionStartIncluding\": \"4.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.113\", \"versionStartIncluding\": \"4.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.55\", \"versionStartIncluding\": \"4.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.14\", \"versionStartIncluding\": \"4.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.3\", \"versionStartIncluding\": \"4.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12\", \"versionStartIncluding\": \"4.13\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T09:42:57.046Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-49981\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-03T22:24:00.609Z\", \"dateReserved\": \"2024-10-21T12:17:06.052Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-21T18:02:27.142Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.