CVE-2024-42280
mISDN: Fix a use after free in hfcmulti_tx()
HIGH
7.8
CVSS Score
Published: August 17, 2024 at 09:08 AM UTC
Updated: August 5, 2026 at 12:04 PM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix a use after free in hfcmulti_tx() Don't dereference *sp after calling dev_kfree_skb(*sp).
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.6.27 ≤ v < 4.19.3202.6.27 ≤ v < 5.10.2242.6.27 ≤ v < 5.15.1652.6.27 ≤ v < 5.4.2822.6.27 ≤ v < 6.1.1032.6.27 ≤ v < 6.10.32.6.27 ≤ v < 6.112.6.27 ≤ v < 6.6.444.20 ≤ v < 5.4.2825.11 ≤ v < 5.15.1655.16 ≤ v < 6.1.1035.5 ≤ v < 5.10.2246.2 ≤ v < 6.6.446.7 ≤ v < 6.10.32.6.27af69fb3a8ffa37e986db00ed93099dc44babeef4
Vendor states this is fixed in 4d8b642985ae24f4b3656438eb8489834a17bb80 (fixed)
Vendor states this is fixed in 61ab751451f5ebd0b98e02276a44e23a10110402 (fixed)
Vendor states this is fixed in 70db2c84631f50e02e6b32b543700699dd395803 (fixed)
Vendor states this is fixed in 7e4a539bca7d8d20f2c5d93c18cce8ef77cd78e0 (fixed)
Vendor states this is fixed in 8f4030277dfb9dbe04fd78566b19931097c9d629 (fixed)
Vendor states this is fixed in 9460ac3dd1ae033bc2b021a458fb535a0c36ddb2 (fixed)
Vendor states this is fixed in d3e4d4a98c5629ccdcb762a0ff6c82ba9738a0c3 (fixed)
Vendor states this is fixed in ddc79556641ee070d36be0de4a1f0a16a71f1fc7 (fixed)
Vendor states this is fixed in 2.6.27 (unaffected)
Vendor states this is fixed in 4.19.320 (unaffected)
Vendor states this is fixed in 5.10.224 (unaffected)
Vendor states this is fixed in 5.15.165 (unaffected)
Vendor states this is fixed in 5.4.282 (unaffected)
Vendor states this is fixed in 6.1.103 (unaffected)
Vendor states this is fixed in 6.10.3 (unaffected)
Vendor states this is fixed in 6.11 (unaffected)
Vendor states this is fixed in 6.6.44 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/4d8b642985ae24f4b3656438eb8489834a17bb80
- https://git.kernel.org/stable/c/61ab751451f5ebd0b98e02276a44e23a10110402
- https://git.kernel.org/stable/c/70db2c84631f50e02e6b32b543700699dd395803
- https://git.kernel.org/stable/c/7e4a539bca7d8d20f2c5d93c18cce8ef77cd78e0
- https://git.kernel.org/stable/c/8f4030277dfb9dbe04fd78566b19931097c9d629
References (10)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4d8b642985ae24f4b3656438eb8489834a17bb80Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/61ab751451f5ebd0b98e02276a44e23a10110402Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/70db2c84631f50e02e6b32b543700699dd395803Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7e4a539bca7d8d20f2c5d93c18cce8ef77cd78e0Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8f4030277dfb9dbe04fd78566b19931097c9d629Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9460ac3dd1ae033bc2b021a458fb535a0c36ddb2Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d3e4d4a98c5629ccdcb762a0ff6c82ba9738a0c3Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ddc79556641ee070d36be0de4a1f0a16a71f1fc7SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
7.8HIGHLinux
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-416
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card