CVE-2024-50051
spi: mpc52xx: Add cancel_work_sync before module remove
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module remove If we remove the module which will call mpc52xx_spi_remove it will free 'ms' through spi_unregister_controller. while the work ms->work will be used. The sequence of operations that may lead to a UAF bug. Fix it by ensuring that the work is canceled before proceeding with the cleanup in mpc52xx_spi_remove.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
3.1
References 7
git.kernel.org
- stable/c/d0cde3911cf24e1bcdd4caa1d1b9ef57589db5a1
- stable/c/e0c6ce8424095c2da32a063d3fc027494c689817
- stable/c/cd5106c77d6d6828aa82449f01f4eb436d602a21
- stable/c/373d55a47dc662e5e30d12ad5d334312f757c1f1
- stable/c/f65d85bc1ffd8a2c194bb2cd65e35ed3648ddd59
- stable/c/90b72189de2cddacb26250579da0510b29a8b82b
- stable/c/984836621aad98802d92c4a3047114cf518074c8