In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let's only add it to the list after everything has succeeded.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/3c7c806b3eafd94ae0f77305a174d63b69ec187c cve-icon cve-icon
https://git.kernel.org/stable/c/588bdec1ff8b81517dbae0ae51c9df52c0b952d3 cve-icon cve-icon
https://git.kernel.org/stable/c/63e72e551942642c48456a4134975136cdcb9b3c cve-icon cve-icon
https://git.kernel.org/stable/c/6ba6e19912570b2ad68298be0be1dc779014a303 cve-icon cve-icon
https://git.kernel.org/stable/c/971b4893457788e0e123ea552f0bb126a5300e61 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/b8b84dcdf3ab1d414304819f824b10efba64132c cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/c3f4f4547fb291982f5ef56c048277c4d5ccc4e4 cve-icon cve-icon
https://git.kernel.org/stable/c/c43df7dae28fb9fce96ef088250c1e3c3a77c527 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-53165 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-53165 cve-icon
History

Thu, 13 Feb 2025 00:30:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Low

 threat_severity

Important

Tue, 11 Feb 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 14 Jan 2025 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-416
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Thu, 09 Jan 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Low

Fri, 27 Dec 2024 14:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let's only add it to the list after everything has succeeded.
Title sh: intc: Fix use-after-free bug in register_intc_controller()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-12-27T13:49:11.401Z

Updated: 2025-05-04T09:54:40.548Z

Reserved: 2024-11-19T17:17:25.004Z

Link: CVE-2024-53165

cve-icon Vulnrichment

Updated: 2025-02-11T15:43:51.034Z

cve-icon NVD

Status : Modified

Published: 2024-12-27T14:15:23.583

Modified: 2025-02-11T16:15:40.500

Link: CVE-2024-53165

cve-icon Redhat

Severity : Important

Publid Date: 2024-12-27T00:00:00Z

Links: CVE-2024-53165 - Bugzilla