发布于3月6日3月6日 Members Debian: CVE-2024-50051: linux -- security update Severity 4 CVSS (AV:L/AC:M/Au:N/C:P/I:P/A:P) Published 01/11/2025 Created 01/14/2025 Added 01/13/2025 Modified 02/06/2025 Description In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module remove If we remove the module which will call mpc52xx_spi_remove it will free 'ms' through spi_unregister_controller. while the work ms->work will be used. The sequence of operations that may lead to a UAF bug. Fix it by ensuring that the work is canceled before proceeding with the cleanup in mpc52xx_spi_remove. Solution(s) debian-upgrade-linux References https://attackerkb.com/topics/cve-2024-50051 CVE - 2024-50051
参与讨论
你可立刻发布并稍后注册。 如果你有帐户，立刻登录发布帖子。