Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-49853 Details

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in OPTEE transport Channels can be shared between protocols, avoid freeing the same channel descriptors twice when unloading the stack.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/6699567b0bbb378600a4dc0a1f929439a4e84a2c kernel.orgPatch
https://git.kernel.org/stable/c/aef6ae124bb3cc12e34430fed91fbb7efd7a444d kernel.orgPatch
https://git.kernel.org/stable/c/d7f4fc2bc101e666da649605a9ece2bd42529c7a kernel.orgPatch
https://git.kernel.org/stable/c/dc9543a4f2a5498a4a12d6d2427492a6f1a28056 kernel.orgPatch
https://git.kernel.org/stable/c/e98dba934b2fc587eafb83f47ad64d9053b18ae0 kernel.orgPatch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-415Double Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.18, < 6.1.113
>= 6.2, < 6.6.54
>= 6.7, < 6.10.13
>= 6.11, < 6.11.2

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-49853
NVD Published Date:
Oct 21, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2024-49853 Details - Not Deferred