CVE-2024-23374

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Oct 7, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-233756.7Memory corruption during the network scan request.CVE-2024-233766.7Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.CVE-2024-233776.7Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system prCVE-2024-233786.7Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.CVE-2024-233796.7Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.CVE-2024-23387.5PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic mCVE-2024-233807.8Memory corruption while handling user packets during VBO bind operation.CVE-2024-233817.8Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.CVE-2024-233827.8Memory corruption while processing graphics kernel driver request to create DMA fence.CVE-2024-233837.8Memory corruption when kernel driver attempts to trigger hardware fences.CVE-2024-233848.4Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.CVE-2024-233856.5Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
CVE-2024-23374: Medium severity, CVSS 6.7 | Vulnix