CVE-2024-27043

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-27043
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27043.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-27043
Downstream
Related
Published
2024-05-01T12:54:11.197Z
Modified
2026-03-14T12:27:44.213147Z
Summary
media: edia: dvbdev: fix a use-after-free
Details

In the Linux kernel, the following vulnerability has been resolved:

media: edia: dvbdev: fix a use-after-free

In dvbregisterdevice, *pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, *pdvbdev is not set to NULL after dvbdev's deallocation, causing use-after-frees in many places, for example, in the following call chain:

budgetregister |-> dvbdmxdevinit |-> dvbregisterdevice |-> dvbdmxdevrelease |-> dvbunregisterdevice |-> dvbremovedevice |-> dvbdeviceput |-> krefput

When calling dvbunregisterdevice, dmxdev->dvbdev (i.e. *pdvbdev in dvbregisterdevice) could point to memory that had been freed in dvbregisterdevice. Thereafter, this pointer is transferred to kref_put and triggering a use-after-free.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27043.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b61901024776b25ce7b8edc31bb1757c7382a88e
Fixed
d0f5c28333822f9baa5280d813124920720fd856
Fixed
f20c3270f3ed5aa6919a87e4de9bf6c05fb57086
Fixed
096237039d00c839f3e3a5fe6d001bf0db45b644
Fixed
0d3fe80b6d175c220b3e252efc6c6777e700e98e
Fixed
437a111f79a2f5b2a5f21e27fdec6f40c8768712
Fixed
779e8db7efb22316c8581d6c229636d2f5694a62
Fixed
35674111a043b0482a9bc69da8850a83f465b07d
Fixed
b7586e902128e4fb7bfbb661cb52e4215a65637b
Fixed
8c64f4cdf4e6cc5682c52523713af8c39c94e6d5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27043.json"