github - ghsa-wxrr-6r77-mpjf

ghsa-wxrr-6r77-mpjf

Vulnerability from github

Published

2024-10-21 15:32

Modified

2024-10-23 18:33

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Fix double free in OPTEE transport

Channels can be shared between protocols, avoid freeing the same channel descriptors twice when unloading the stack.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-49853",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-415",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-10-21T13:15:06Z",
      severity: "HIGH",
   },
   details: "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Fix double free in OPTEE transport\n\nChannels can be shared between protocols, avoid freeing the same channel\ndescriptors twice when unloading the stack.",
   id: "GHSA-wxrr-6r77-mpjf",
   modified: "2024-10-23T18:33:07Z",
   published: "2024-10-21T15:32:27Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-49853",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/6699567b0bbb378600a4dc0a1f929439a4e84a2c",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/aef6ae124bb3cc12e34430fed91fbb7efd7a444d",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/d7f4fc2bc101e666da649605a9ece2bd42529c7a",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/dc9543a4f2a5498a4a12d6d2427492a6f1a28056",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/e98dba934b2fc587eafb83f47ad64d9053b18ae0",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
   ],
}

cve-2024-49853

Vulnerability from cvelistv5

Published

2024-10-21 12:18

Modified

2024-12-19 09:27

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in OPTEE transport Channels can be shared between protocols, avoid freeing the same channel descriptors twice when unloading the stack.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/d7f4fc2bc101e666da649605a9ece2bd42529c7a
	https://git.kernel.org/stable/c/6699567b0bbb378600a4dc0a1f929439a4e84a2c
	https://git.kernel.org/stable/c/dc9543a4f2a5498a4a12d6d2427492a6f1a28056
	https://git.kernel.org/stable/c/aef6ae124bb3cc12e34430fed91fbb7efd7a444d
	https://git.kernel.org/stable/c/e98dba934b2fc587eafb83f47ad64d9053b18ae0

Impacted products

Vendor

Product

Version

▼

Linux

Version: 5f90f189a052f6fc46048f6ce29a37b709548b81
Version: 5f90f189a052f6fc46048f6ce29a37b709548b81
Version: 5f90f189a052f6fc46048f6ce29a37b709548b81
Version: 5f90f189a052f6fc46048f6ce29a37b709548b81
Version: 5f90f189a052f6fc46048f6ce29a37b709548b81

Linux

Version: 5.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-49853",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-21T12:56:39.770816Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-21T13:04:11.566Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Linux",
               programFiles: [
                  "drivers/firmware/arm_scmi/optee.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "d7f4fc2bc101e666da649605a9ece2bd42529c7a",
                     status: "affected",
                     version: "5f90f189a052f6fc46048f6ce29a37b709548b81",
                     versionType: "git",
                  },
                  {
                     lessThan: "6699567b0bbb378600a4dc0a1f929439a4e84a2c",
                     status: "affected",
                     version: "5f90f189a052f6fc46048f6ce29a37b709548b81",
                     versionType: "git",
                  },
                  {
                     lessThan: "dc9543a4f2a5498a4a12d6d2427492a6f1a28056",
                     status: "affected",
                     version: "5f90f189a052f6fc46048f6ce29a37b709548b81",
                     versionType: "git",
                  },
                  {
                     lessThan: "aef6ae124bb3cc12e34430fed91fbb7efd7a444d",
                     status: "affected",
                     version: "5f90f189a052f6fc46048f6ce29a37b709548b81",
                     versionType: "git",
                  },
                  {
                     lessThan: "e98dba934b2fc587eafb83f47ad64d9053b18ae0",
                     status: "affected",
                     version: "5f90f189a052f6fc46048f6ce29a37b709548b81",
                     versionType: "git",
                  },
               ],
            },
            {
               defaultStatus: "affected",
               product: "Linux",
               programFiles: [
                  "drivers/firmware/arm_scmi/optee.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     status: "affected",
                     version: "5.18",
                  },
                  {
                     lessThan: "5.18",
                     status: "unaffected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.1.*",
                     status: "unaffected",
                     version: "6.1.113",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.6.*",
                     status: "unaffected",
                     version: "6.6.54",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.10.*",
                     status: "unaffected",
                     version: "6.10.13",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.11.*",
                     status: "unaffected",
                     version: "6.11.2",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "*",
                     status: "unaffected",
                     version: "6.12",
                     versionType: "original_commit_for_fix",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Fix double free in OPTEE transport\n\nChannels can be shared between protocols, avoid freeing the same channel\ndescriptors twice when unloading the stack.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-19T09:27:35.475Z",
            orgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            shortName: "Linux",
         },
         references: [
            {
               url: "https://git.kernel.org/stable/c/d7f4fc2bc101e666da649605a9ece2bd42529c7a",
            },
            {
               url: "https://git.kernel.org/stable/c/6699567b0bbb378600a4dc0a1f929439a4e84a2c",
            },
            {
               url: "https://git.kernel.org/stable/c/dc9543a4f2a5498a4a12d6d2427492a6f1a28056",
            },
            {
               url: "https://git.kernel.org/stable/c/aef6ae124bb3cc12e34430fed91fbb7efd7a444d",
            },
            {
               url: "https://git.kernel.org/stable/c/e98dba934b2fc587eafb83f47ad64d9053b18ae0",
            },
         ],
         title: "firmware: arm_scmi: Fix double free in OPTEE transport",
         x_generator: {
            engine: "bippy-5f407fcff5a0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      assignerShortName: "Linux",
      cveId: "CVE-2024-49853",
      datePublished: "2024-10-21T12:18:46.093Z",
      dateReserved: "2024-10-21T12:17:06.016Z",
      dateUpdated: "2024-12-19T09:27:35.475Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted