CVE-2024-53194: PCI: Fix use-after-free of slot->bus on hot remove
Published Dec 27, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
10 affected componentsFixes available
Linux Kernel>6.11.0-devel+
Linux Linux kernel<4.19.325
Linux Linux kernel>=4.20<5.4.287
Linux Linux kernel>=5.5<5.10.231
Linux Linux kernel>=5.11<5.15.174
Linux Linux kernel>=5.16<6.1.120
Linux Linux kernel>=6.2<6.6.64
Linux Linux kernel>=6.7<6.11.11
Linux Linux kernel>=6.12<6.12.2
debian/linux
6.1.176-16.1.187-16.12.107-16.12.111-17.2.9-17.2.10-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Dec 27, 2024
CVE Published
via MITRE·01:49 PM
Data Sourced
via MITRE·01:49 PM
Description
Data Sourced
via Red Hat·02:02 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 13, 2026
Data Sourced
via Debian·04:45 PM
DescriptionAffected Software
Oct 14, 2026
Data Sourced
via Ubuntu·04:46 PM
RemedyDescriptionSeverityAffected Software
Oct 15, 2026
Data Sourced
via Launchpad·04:48 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-53194?
CVE-2024-53194 has been classified with a severity that can lead to a boot crash in Linux kernel environments.
2
How do I fix CVE-2024-53194?
To fix CVE-2024-53194, upgrade to the recommended Linux kernel versions 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1.
3
Which versions of the Linux kernel are affected by CVE-2024-53194?
CVE-2024-53194 affects Linux kernel versions prior to 6.11.0-devel and Debian/Kernels up to 5.10.226-1.
4
What causes the vulnerability CVE-2024-53194?
CVE-2024-53194 is caused by a use-after-free issue pertaining to the hot removal of PCI slots.
5
Are certain hardware configurations more vulnerable to CVE-2024-53194?
Yes, recent Lenovo laptops with USB4 docks are particularly affected by CVE-2024-53194.