CVE-2024-49853: firmware: arm_scmi: Fix double free in OPTEE transport
In the Linux kernel, the following vulnerability has been resolved:
firmware: armscmi: Fix double free in OPTEE transport
Channels can be shared between protocols, avoid freeing the same channel descriptors twice when unloading the stack.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49853?
CVE-2024-49853 has a medium severity rating due to the potential for double free vulnerabilities in the Linux kernel.
What software is affected by CVE-2024-49853?
CVE-2024-49853 affects various versions of the Linux kernel, specifically those between versions 5.18 and 6.11.2 inclusive.
How do I fix CVE-2024-49853?
To fix CVE-2024-49853, update your Linux kernel to a version that is not affected by this vulnerability.
What types of systems are impacted by CVE-2024-49853?
CVE-2024-49853 primarily impacts Linux-based systems utilizing the affected kernel versions.
Is CVE-2024-49853 a local or remote vulnerability?
CVE-2024-49853 is considered a local vulnerability because it requires local access to exploit the double free issue.