CVE-2024-47730 Details
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - inject error before stopping queue The master ooo cannot be completely closed when the accelerator core reports memory error. Therefore, the driver needs to inject the qm error to close the master ooo. Currently, the qm error is injected after stopping queue, memory may be released immediately after stopping queue, causing the device to access the released memory. Therefore, error is injected to close master ooo before stopping queue to ensure that the device does not access the released memory.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 21, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/801d64177faaec184cee1e1aa4d8487df1364a54 | kernel.org | Patch |
| https://git.kernel.org/stable/c/85e81103033324d7a271dafb584991da39554a89 | kernel.org | Patch |
| https://git.kernel.org/stable/c/98d3be34c9153eceadb56de50d9f9347e88d86e4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/aa3e0db35a60002fb34ef0e4ad203aa59fd00203 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b04f06fc0243600665b3b50253869533b7938468 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c5f5b813e546f7fe133539c3d7a5086cc8dd2aa1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f8024f12752e32ffbbf59e1c09d949f977ff743f | kernel.org | Patch |
| https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html | CVE | Mailing ListThird Party Advisory |
| https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html | CVE | Mailing ListThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| debian debian linux | 11.0 |
CPE
Remediation
| |
| linux linux kernel | >= 5.8, < 5.10.235 >= 5.11, < 5.15.174 >= 5.16, < 6.1.113 >= 6.2, < 6.6.54 >= 6.7, < 6.10.13 >= 6.11, < 6.11.2 |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 12, 2026 | Modified Analysis | [email protected] |
| Nov 3, 2025 | CVE Modified | CVE |
| Nov 3, 2025 | CVE Modified | CVE |
| Mar 13, 2025 | CVE Modified | kernel.org |
| Dec 14, 2024 | CVE Modified | kernel.org |
| Oct 23, 2024 | Initial Analysis | [email protected] |
| Oct 21, 2024 | New CVE Received | kernel.org |