CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure
In the Linux kernel, the following vulnerability has been resolved:
net/ncsi: Disable the ncsi work before freeing the associated structure
The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49945?
CVE-2024-49945 is classified as a critical vulnerability due to the potential for use-after-free bugs and kernel panic.
How do I fix CVE-2024-49945?
To address CVE-2024-49945, update the Linux kernel to a version that includes the patch for this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-49945?
CVE-2024-49945 affects Linux kernel versions from 4.8 up to 6.10.14 as well as versions between 6.11 and 6.11.3 and 6.12-rc1.
What are the risks of not addressing CVE-2024-49945?
Failing to mitigate CVE-2024-49945 can lead to system crashes and security breaches due to potential exploitation of the vulnerability.
Who is responsible for fixing CVE-2024-49945?
It is the responsibility of system administrators and Linux distribution maintainers to patch vulnerable systems against CVE-2024-49945.