CVE-2024-49955

MEDIUM EPSS 25.7%
Published Oct 21, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Oct 21, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook provider cannot know that, so it will later call battery_hook_unregister() on the already unregistered battery hook, resulting in a crash. Fix this by using the list head to mark already unregistered battery hooks as already being unregistered so that they can be ignored by battery_hook_unregister().

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
25.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-672

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥4.17  –  <5.10.227
linuxlinux_kernel*≥5.11  –  <5.15.168
linuxlinux_kernel*≥5.16  –  <6.1.113
linuxlinux_kernel*≥6.2  –  <6.6.55
linuxlinux_kernel*≥6.7  –  <6.10.14
linuxlinux_kernel*≥6.11  –  <6.11.3
linuxlinux_kernel6.12any

References 13

  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-265688.html
  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-355557.html
  • git.kernel.org https://git.kernel.org/stable/c/07b98400cb0285a6348188aa8c5ec6a2ae0551f7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/76959aff14a0012ad6b984ec7686d163deccdc16
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/76fb2cbf01571926da8ecf6876cc8cb07d3f5183
  • git.kernel.org https://git.kernel.org/stable/c/9f469ef1c79dac7f9ac1518643a33703918f7e13
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c47843a831e0eae007ad7e848d208e675ba4c132
  • git.kernel.org https://git.kernel.org/stable/c/ca1fb7942a287b40659cc79551a1de54a2c2e7d5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ce31847f109c3a5b2abdd19d7bcaafaacfde53de
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/da964de4c18199e14b961b5b2e5e6570552a313c
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/07b98400cb0285a6348188aa8c5ec6a2ae0551f7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/76959aff14a0012ad6b984ec7686d163deccdc16
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9f469ef1c79dac7f9ac1518643a33703918f7e13
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ca1fb7942a287b40659cc79551a1de54a2c2e7d5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ce31847f109c3a5b2abdd19d7bcaafaacfde53de
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/da964de4c18199e14b961b5b2e5e6570552a313c
    Patch