CVE-2024-53064

Summary

CVE-2024-53064 is a vulnerability affecting the Linux kernel. During a reboot, the idpf driver may release all resources and wait for the device control plane to start. If the control plane is not yet running at this time, the driver may timeout and attempt to re-establish the mailbox connection. However, the mailbox workqueue remains active, leading to null-pointer dereference when accessing the released control queue. This issue has been resolved by unrolling the work queue cancellation and mailbox deinitialization in reverse order.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.