Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Aleksandr Burakov

#33084of 53,632
7.8Total CVSS
Vulnerabilities · 1
PT-2024-7601
7.8
2024-10-06
Linux · Linux Kernel · CVE-2024-49986
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.58 **Description** The issue is related to the reuse of previously freed memory in the `x86 android tablet probe()` function within the Linux kernel. This could potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability occurs when `platform device register()` fails, and the `pdevs[]` array is used after being freed by `x86 android tablet remove()`. To avoid this, the `PTR ERR()` value should be stored before calling `x86 android tablet remove()`. **Recommendations** For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider modifying the code to store the `PTR ERR()` value before calling `x86 android tablet remove()` to avoid using the `pdevs[]` array after it has been freed. Restrict access to the vulnerable `x86 android tablet probe()` function until the issue is resolved.