First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-49860

HighCVSS 7.1/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: sysfs: validate return type of _STR method

Only buffer objects are valid return values of _STR.

If something else is returned description_show() will access invalid memory.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < 92fd5209fc014405f63a7db79802ca4b01dc0c05; >= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < 2364b6af90c6b6d8a4783e0d3481ca80af699554; >= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < 4b081991c4363e072e1748efed0bbec8a77daba5; >= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < 0cdfb9178a3bba843c95c2117c82c15f1a64b9ce; >= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < 5c8d007c14aefc3f2ddf71e4c40713733dc827be; >= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < f0921ecd4ddc14646bb5511f49db4d7d3b0829f0; >= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < f51e5a88f2e7224858b261546cf6b3037dfb1323; >= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < f51f711d36e61fbb87c67b524fd200e05172668d; >= d1efe3c324ead77d3f6cd85093b50f6bd2e17aba, < 4bb1e7d027413835b086aed35bc3f0713bc0f72b
Linux	Linux	3.7

References

Timeline

Published: Oct 21, 2024
Last modified: Aug 4, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-498617.1In the Linux kernel, the following vulnerability has been resolved: bpf: Fix helper writes to read-only maps Lonial found an issue that de CVE-2024-498627.1In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix off by one in get_rpi() The rp->priv->rpi ar CVE-2024-498635.5In the Linux kernel, the following vulnerability has been resolved: vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() Since commit CVE-2024-498644.7In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix a race between socket set up and I/O thread creation In rxr CVE-2024-498657.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xa_alloc to prevent UAF Evil user can guess the next i CVE-2024-498664.7In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processing There is another CVE-2024-498675.5In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during um CVE-2024-498685.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasac CVE-2024-498697.8In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when copying path to cache e CVE-2024-498705.5In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in cachefiles_open_file() A dentry leak ma CVE-2024-498715.5In the Linux kernel, the following vulnerability has been resolved: Input: adp5589-keys - fix NULL pointer dereference We register a devm CVE-2024-498724.7In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix memfd_pin_folios alloc race panic If memfd_pin_folios trie

CVE-2024-49860: High severity, CVSS 7.1 | Vulnix