CVE-2024-49986

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors

x86_android_tablet_remove() frees the pdevs[] array, so it should not be used after calling x86_android_tablet_remove().

When platform_device_register() fails, store the pdevs[x] PTR_ERR() value into the local ret variable before calling x86_android_tablet_remove() to avoid using pdevs[] after it has been freed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 5eba0141206ea521bbcfcf5067c174e825e943dd, < ba0b09a2f327319e252d8f3032019b958c0a5cd9; >= 5eba0141206ea521bbcfcf5067c174e825e943dd, < aac871e493fc8809e60209d9899b1af07e9dbfc8; >= 5eba0141206ea521bbcfcf5067c174e825e943dd, < f08adc5177bd4343df09033f62ab562c09ba7f7d; >= 5eba0141206ea521bbcfcf5067c174e825e943dd, < 73a98cf79e4dbfa3d0c363e826c65aae089b313c; >= 5eba0141206ea521bbcfcf5067c174e825e943dd, < 2fae3129c0c08e72b1fe93e61fd8fd203252094a
LinuxLinux5.17

References

Timeline

Published
Oct 21, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-499875.5In the Linux kernel, the following vulnerability has been resolved: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) When netfilter CVE-2024-499885.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbd_conn struct When sending an oplock break reCVE-2024-499897.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue during amdgpu module unload FleCVE-2024-49999.4A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute aCVE-2024-499905.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initCVE-2024-499917.8In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer Pass pointerCVE-2024-499927.8In the Linux kernel, the following vulnerability has been resolved: drm/stm: Avoid use-after-free issues with crtc and plane ltdc_load() cCVE-2024-499945.5In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscoveCVE-2024-499967.8In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLCVE-2024-499977.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying paddinCVE-2024-499984.7In the Linux kernel, the following vulnerability has been resolved: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 probCVE-2024-499995.5In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afs_wait_for_ope
CVE-2024-49986: High severity, CVSS 7.8 | Vulnix