CVE-2024-49955

Nov. 8, 2024, 4:15 p.m.

5.5
Medium

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook provider cannot know that, so it will later call battery_hook_unregister() on the already unregistered battery hook, resulting in a crash. Fix this by using the list head to mark already unregistered battery hooks as already being unregistered so that they can be ignored by battery_hook_unregister().

Product(s) Impacted

Vendor Product Versions
Linux
  • Linux Kernel
  • *, 6.12

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-672
Operation on a Resource after Expiration or Release
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel 6.12 rc1 / / / / / /

References

https://git.kernel.org/stable/c/07b98400cb0285a6348188aa8c5ec6a2ae0551f7
https://git.kernel.org/stable/c/76959aff14a0012ad6b984ec7686d163deccdc16
https://git.kernel.org/stable/c/76fb2cbf01571926da8ecf6876cc8cb07d3f5183
https://git.kernel.org/stable/c/9f469ef1c79dac7f9ac1518643a33703918f7e13
https://git.kernel.org/stable/c/c47843a831e0eae007ad7e848d208e675ba4c132
https://git.kernel.org/stable/c/ca1fb7942a287b40659cc79551a1de54a2c2e7d5
https://git.kernel.org/stable/c/ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b
https://git.kernel.org/stable/c/ce31847f109c3a5b2abdd19d7bcaafaacfde53de
https://git.kernel.org/stable/c/da964de4c18199e14b961b5b2e5e6570552a313c

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
CWE-672
2024-10-21
CVE-2024-49955

CVSS Score

5.5 / 10

CVSS Data - 3.1

  • Attack Vector: LOCAL
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: HIGH

    • CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

    View Vector String

Timeline

Published: Oct. 21, 2024, 6:15 p.m.
Last Modified: Nov. 8, 2024, 4:15 p.m.

Status : Modified

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.