CVE-2024-49992

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/stm: Avoid use-after-free issues with crtc and plane

ltdc_load() calls functions drm_crtc_init_with_planes(), drm_universal_plane_init() and drm_encoder_init(). These functions should not be called with parameters allocated with devm_kzalloc() to avoid use-after-free issues [1].

Use allocations managed by the DRM framework.

Found by Linux Verification Center (linuxtesting.org).

[1] https://lore.kernel.org/lkml/u366i76e3qhh3ra5oxrtngjtm2u5lterkekcz6y2jkndhuxzli@diujon4h7qwb/

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= b759012c5fa761ee08998c80fc4ad6343c258487, < d02611ff001454358be6910cb926799e2d818716; >= b759012c5fa761ee08998c80fc4ad6343c258487, < 0a1741d10da29aa84955ef89ae9a03c4b6038657; >= b759012c5fa761ee08998c80fc4ad6343c258487, < 454e5d7e671946698af0f201e48469e5ddb42851; >= b759012c5fa761ee08998c80fc4ad6343c258487, < b22eec4b57d04befa90e8554ede34e6c67257606; >= b759012c5fa761ee08998c80fc4ad6343c258487, < 19dd9780b7ac673be95bf6fd6892a184c9db611f
LinuxLinux4.13

References

Timeline

Published
Oct 21, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-499945.5In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscoveCVE-2024-499967.8In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLCVE-2024-499977.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying paddinCVE-2024-499984.7In the Linux kernel, the following vulnerability has been resolved: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 probCVE-2024-499995.5In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afs_wait_for_opeCVE-2024-50007.5An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause CVE-2024-500005.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() In mlx5e_tir_buCVE-2024-500015.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erronCVE-2024-500025.5In the Linux kernel, the following vulnerability has been resolved: static_call: Handle module init failure correctly in static_call_del_moCVE-2024-500035.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor [Why] CCVE-2024-500045.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAcceleratioCVE-2024-500057.8In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
CVE-2024-49992: High severity, CVSS 7.8 | Vulnix