PT-2024-7039 · Linux+6 · Linux Kernel+6
Olivier Sobrie
·
Published
2024-08-02
·
Updated
2025-09-29
·
CVE-2024-46746
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.52
Description
The vulnerability is related to the use of freed memory in the
amd sfh get report function, which can lead to a slab-use-after-free bug. This issue can cause a crash or potentially allow an attacker to exploit the vulnerability. The problem arises because HID driver callbacks are not called after the hid destroy device function has been called, but the driver data is still used in several callbacks.Recommendations
To resolve this issue, update the Linux kernel to version 6.6.52 or later. If updating is not possible, consider disabling the
amd sfh driver or restricting its use until a patch is available.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu