CVE-2024-49924: fbdev: pxafb: Fix possible use after free in pxafb_task()

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• debian debian linux11.0
• linux linux kernel2.6.27 and later · before 4.19.323
• linux linux kernel4.20 and later · before 5.4.285
• linux linux kernel5.5 and later · before 5.10.227
• linux linux kernel5.11 and later · before 5.15.168
• linux linux kernel5.16 and later · before 6.1.113
• linux linux kernel6.2 and later · before 6.6.55
• linux linux kernel6.7 and later · before 6.10.14
• linux linux kernel6.11 and later · before 6.11.3

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 2.6.27affected
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before e657fa2df4429f3805a9b3e47fb1a4a1b02a72bdaffected · git
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before 6d0a07f68b66269e167def6c0b90a219cd3e7473affected · git
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before e6897e299f57b103e999e62010b88e363b3eebaeaffected · git
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before 4cda484e584be34d55ee17436ebf7ad11922b97aaffected · git
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before 3c0d416eb4bef705f699213cee94bf54b6acdacdaffected · git
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before fdda354f60a576d52dcf90351254714681df4370affected · git
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before aaadc0cb05c999ccd8898a03298b7e5c31509b08affected · git
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before a3a855764dbacbdb1cc51e15dc588f2d21c93e0eaffected · git
  • 9f17f2874834f4cdbe48cc05676d8f7558793204 and later · before 4a6921095eb04a900e0000da83d9475eb958e61eaffected · git

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe…KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2024-49916Oct 21, 2024 · drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw
  22Monitor
• ← EarlierCVE-2024-49917Oct 21, 2024 · drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  22Monitor
• Later →CVE-2024-49925Oct 21, 2024 · fbdev: efifb: Register sysfs groups through driver core
  22Monitor

Root cause

After a memory region is freed, another reference pointing to it is still used. By then, the same region may have been allocated for different data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1free(dev->buf);2/* ... another thread is still running ... */3process(dev->buf);

1lock(&dev->lock);2free(dev->buf);3dev->buf = NULL;4unlock(&dev->lock);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.