CVE-2024-49852

CVE-2024-49852: vulnerability in Linux

scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
exploitation probability
0.2%top 90% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() The kref_put() function will call nport->release if the refcount drops to zero. The nport->release release function is _efc_nport_free() which frees "nport". But then we dereference "nport" on the next line which is a use after free. Re-order these lines to avoid the use after free.
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2024-53150HIGHALSA: usb-audio: Fix out of bounds reads when finding clock sourcesEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/16a570f07d870a285b0c0b0d1ca4dff79e8aa5ffhttps://git.kernel.org/stable/c/2e4b02fad094976763af08fec2c620f4f8edd9aehttps://git.kernel.org/stable/c/7c2908985e4ae0ea1b526b3916de9e5351650908https://git.kernel.org/stable/c/98752fcd076a8cbc978016eae7125b4971be1eechttps://git.kernel.org/stable/c/abc71e89170ed32ecf0a5a29f31aa711e143e941https://git.kernel.org/stable/c/baeb8628ab7f4577740f00e439d3fdf7c876b0ffhttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html