Linux Kernel: Use after free bug in debug printk fixed in io_edgeport module

CVE-2024-50267

What is CVE-2024-50267?

This vulnerability is related to a use after free condition in the USB serial driver of the Linux kernel. When the 'debug printk' function is called after the usb_free_urb function has been executed, it leads to a reference to an already freed memory space. This situation can potentially allow an attacker to exploit the system by addressing mismanaged memory, which could result in unintended behavior or crashes. The solution involves storing the device pointer at the beginning of the function to safely manage memory and prevent dereferencing freed resources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References