Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Olivier Sobrie

#33161of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2024-7039
7.8
2024-08-02
Linux · Linux Kernel · CVE-2024-46746
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.52 **Description** The vulnerability is related to the use of freed memory in the `amd sfh get report` function, which can lead to a slab-use-after-free bug. This issue can cause a crash or potentially allow an attacker to exploit the vulnerability. The problem arises because HID driver callbacks are not called after the `hid destroy device` function has been called, but the `driver data` is still used in several callbacks. **Recommendations** To resolve this issue, update the Linux kernel to version 6.6.52 or later. If updating is not possible, consider disabling the `amd sfh` driver or restricting its use until a patch is available.