CVE-2024-24864: Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write()
A race condition was found in the Linux kernel's media/dvb-core in dvbdmxwrite() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (media/dvb-core)to a version that resolves this vulnerability.Patch 20230626024429.994136-1-islituo@gmail.com
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24864?
CVE-2024-24864 has a high severity rating due to its potential to cause kernel panic or denial of service.
How do I fix CVE-2024-24864?
To fix CVE-2024-24864, upgrade to the latest version of the Linux kernel that is not affected by this vulnerability.
Which Linux kernel versions are affected by CVE-2024-24864?
CVE-2024-24864 affects Linux kernel versions up to 2.6.11 and versions between 6.0 and 6.7.2, as well as 2.6.12-rc1 and 6.8-rc1.
What potential impacts does CVE-2024-24864 have?
The impact of CVE-2024-24864 includes the risk of null pointer dereference, leading to system instability and potential service disruption.
Is CVE-2024-24864 a remote vulnerability?
CVE-2024-24864 is primarily a local privilege escalation vulnerability but can be exploited in scenarios where untrusted input is processed.