Linux · Linux Kernel · CVE-2024-49986
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.6.58
**Description**
The issue is related to the reuse of previously freed memory in the `x86 android tablet probe()` function within the Linux kernel. This could potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability occurs when `platform device register()` fails, and the `pdevs[]` array is used after being freed by `x86 android tablet remove()`. To avoid this, the `PTR ERR()` value should be stored before calling `x86 android tablet remove()`.
**Recommendations**
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider modifying the code to store the `PTR ERR()` value before calling `x86 android tablet remove()` to avoid using the `pdevs[]` array after it has been freed. Restrict access to the vulnerable `x86 android tablet probe()` function until the issue is resolved.