NetSight
IP …
high7.8

CVE-2024-49986

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors …

Impact

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors x86_android_tablet_remove() frees the pdevs[] array, so it should not be used after calling x86_android_tablet_remove(). When platform_device_register() fails, store the pdevs[x] PTR_ERR() value into the local ret variable before calling x86_android_tablet_remove() to avoid using pdevs[] after it has been freed.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 11.0
LinuxLinux Kernel
from 5.17 before 6.1.118
from 6.2 before 6.6.55
from 6.7 before 6.10.14
from 6.11 before 6.11.3
Version 6.12

Weakness classification

CWE-416

References