Use-After-Free Vulnerability in Linux Kernel Media Drivers

CVE-2024-23848

Summary

A vulnerability exists in the Linux kernel affecting versions up to 6.7.1 where a use-after-free condition in the media drivers can be exploited. This issue is found in the cec_queue_msg_fh function within drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c. An attacker could exploit this vulnerability to potentially execute arbitrary code or disrupt normal operations.

References