CVE-2024-53183

um: net: Do not use drvdata in release

MEDIUM

5.5

CVSS Score

Published: December 27, 2024 at 01:49 PM UTC

Updated: June 17, 2026 at 08:08 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: um: net: Do not use drvdata in release The drvdata is not available in release. Let's just use container_of() to get the uml_net instance. Otherwise, removing a network device will result in a crash: RIP: 0033:net_device_release+0x10/0x6f RSP: 00000000e20c7c40 EFLAGS: 00010206 RAX: 000000006002e4e7 RBX: 00000000600f1baf RCX: 00000000624074e0 RDX: 0000000062778000 RSI: 0000000060551c80 RDI: 00000000627af028 RBP: 00000000e20c7c50 R08: 00000000603ad594 R09: 00000000e20c7b70 R10: 000000000000135a R11: 00000000603ad422 R12: 0000000000000000 R13: 0000000062c7af00 R14: 0000000062406d60 R15: 00000000627700b6 Kernel panic - not syncing: Segfault with no mm CPU: 0 UID: 0 PID: 29 Comm: kworker/0:2 Not tainted 6.12.0-rc6-g59b723cd2adb #1 Workqueue: events mc_work_proc Stack: 627af028 62c7af00 e20c7c80 60276fcd 62778000 603f5820 627af028 00000000 e20c7cb0 603a2bcd 627af000 62770010 Call Trace: [<60276fcd>] device_release+0x70/0xba [<603a2bcd>] kobject_put+0xba/0xe7 [<60277265>] put_device+0x19/0x1c [<60281266>] platform_device_put+0x26/0x29 [<60281e5f>] platform_device_unregister+0x2c/0x2e [<6002ec9c>] net_remove+0x63/0x69 [<60031316>] ? mconsole_reply+0x0/0x50 [<600310c8>] mconsole_remove+0x160/0x1cc [<60087d40>] ? __remove_hrtimer+0x38/0x74 [<60087ff8>] ? hrtimer_try_to_cancel+0x8c/0x98 [<6006b3cf>] ? dl_server_stop+0x3f/0x48 [<6006b390>] ? dl_server_stop+0x0/0x48 [<600672e8>] ? dequeue_entities+0x327/0x390 [<60038fa6>] ? um_set_signals+0x0/0x43 [<6003070c>] mc_work_proc+0x77/0x91 [<60057664>] process_scheduled_works+0x1b3/0x2dd [<60055f32>] ? assign_work+0x0/0x58 [<60057f0a>] worker_thread+0x1e9/0x293 [<6005406f>] ? set_pf_worker+0x0/0x64 [<6005d65d>] ? arch_local_irq_save+0x0/0x2d [<6005d748>] ? kthread_exit+0x0/0x3a [<60057d21>] ? worker_thread+0x0/0x293 [<6005dbf1>] kthread+0x126/0x12b [<600219c5>] new_thread_handler+0x85/0xb6

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.19.3252.6.22 ≤ v < 4.19.3252.6.22 ≤ v < 5.10.2312.6.22 ≤ v < 5.15.1742.6.22 ≤ v < 5.4.2872.6.22 ≤ v < 6.1.1202.6.22 ≤ v < 6.11.112.6.22 ≤ v < 6.12.22.6.22 ≤ v < 6.132.6.22 ≤ v < 6.6.644.20 ≤ v < 5.4.2875.11 ≤ v < 5.15.1745.16 ≤ v < 6.1.1205.5 ≤ v < 5.10.2316.12 ≤ v < 6.12.26.2 ≤ v < 6.6.646.7 ≤ v < 6.11.112.6.222e3f5251ac716879df6b6271f243f657c6e02e9a

Vendor states this is fixed in 160cd5f956d191eb97664afd31ca59284c08d876 (fixed)

Vendor states this is fixed in 1635d9a0ff1b8bd7aa4767d4ea7b3de72cd36f28 (fixed)

Vendor states this is fixed in 468c2e5394afc848efb1eae6e1961a3c855cf35e (fixed)

Vendor states this is fixed in 6be99d4c117b9642a44d9f54f034b67615be2b2b (fixed)

Vendor states this is fixed in 8d9d174d3f55daaf5e7b48e9d7f53c723adbed86 (fixed)

Vendor states this is fixed in b174ab33aaafd556a1ead72fa8e35d70b6fb1e39 (fixed)

Vendor states this is fixed in cdbd5a1dcdc2c27ac076f91b03b9add3fefa1a82 (fixed)

Vendor states this is fixed in d1db692a9be3b4bd3473b64fcae996afaffe8438 (fixed)

Vendor states this is fixed in f04cd022ee1fde219e0db1086c27a0a5ba1914db (fixed)

Vendor states this is fixed in 2.6.22 (unaffected)

Vendor states this is fixed in 4.19.325 (unaffected)

Vendor states this is fixed in 5.10.231 (unaffected)