Executive Summary

Informations
Name CVE-2024-49852 First vendor Publication 2024-10-21
Vendor Cve Last vendor Modification 2024-10-23

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 7.8
Base Score 7.8 Environmental Score 7.8
impact SubScore 5.9 Temporal Score 7.8
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()

The kref_put() function will call nport->release if the refcount drops to zero. The nport->release release function is _efc_nport_free() which frees "nport". But then we dereference "nport" on the next line which is a use after free. Re-order these lines to avoid the use after free.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49852

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-416 Use After Free

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3658

Sources (Detail)

https://git.kernel.org/stable/c/16a570f07d870a285b0c0b0d1ca4dff79e8aa5ff
https://git.kernel.org/stable/c/2e4b02fad094976763af08fec2c620f4f8edd9ae
https://git.kernel.org/stable/c/7c2908985e4ae0ea1b526b3916de9e5351650908
https://git.kernel.org/stable/c/98752fcd076a8cbc978016eae7125b4971be1eec
https://git.kernel.org/stable/c/abc71e89170ed32ecf0a5a29f31aa711e143e941
https://git.kernel.org/stable/c/baeb8628ab7f4577740f00e439d3fdf7c876b0ff
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Date Informations
2025-01-08 03:06:07
  • Multiple Updates
2025-01-07 03:05:40
  • Multiple Updates
2024-12-25 03:04:18
  • Multiple Updates
2024-12-12 03:07:14
  • Multiple Updates
2024-11-23 03:04:08
  • Multiple Updates
2024-11-22 03:02:16
  • Multiple Updates
2024-11-20 03:00:35
  • Multiple Updates
2024-11-14 03:00:51
  • Multiple Updates
2024-11-09 03:00:50
  • Multiple Updates
2024-10-26 00:28:34
  • Multiple Updates
2024-10-25 21:29:29
  • Multiple Updates
2024-10-25 00:28:33
  • Multiple Updates
2024-10-24 21:27:51
  • Multiple Updates
2024-10-24 03:05:03
  • Multiple Updates
2024-10-23 21:27:44
  • Multiple Updates
2024-10-21 21:27:31
  • Multiple Updates
2024-10-21 17:27:34
  • First insertion