CVE-2024-27054: s390/dasd: fix double module refcount decrement
In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: fix double module refcount decrement
Once the discipline is associated with the device, deleting the device takes care of decrementing the module's refcount. Doing it manually on this error path causes refcount to artificially decrease on each error while it should just stay the same.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27054?
CVE-2024-27054 has been categorized as a moderate severity vulnerability.
How do I fix CVE-2024-27054?
To fix CVE-2024-27054, upgrade your Linux kernel to version 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1 depending on your distribution.
Which software versions are affected by CVE-2024-27054?
CVE-2024-27054 affects Linux kernel versions up to and including 5.10.226-1.
What is the nature of the vulnerability described in CVE-2024-27054?
CVE-2024-27054 is related to an improper handling of module reference counts in the Linux kernel's s390/dasd component.
Is CVE-2024-27054 specific to any Linux distributions?
Yes, CVE-2024-27054 specifically affects the Debian Linux distribution.