CVE-2024-49945

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-49945
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49945.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-49945
Downstream
AZL (2)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (4)
openSUSE (2)
ROOT (3)
SUSE (15)
UBUNTU (1)
Related
openSUSE (2)
SUSE (15)
USN (2)
Published
2024-10-21T18:02:03Z
Modified
2026-10-22T02:47:37Z
Summary
net/ncsi: Disable the ncsi work before freeing the associated structure
Details

In the Linux kernel, the following vulnerability has been resolved:

net/ncsi: Disable the ncsi work before freeing the associated structure

The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49945.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2d283bdd079c0ad4da020bbc9e9c2a4280823098
Fixed
64704f231d5dee8639e256507178f43dde1f131c
Fixed
f6ca58696749268181f43150b3553f2bafd71e42
Fixed
dd41dab62f32d9e9e0669af8459d12a93834b238
Fixed
a0ffa68c70b367358b2672cdab6fa5bc4c40de2c

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49945.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.8.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.14
Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.11.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49945.json"