CVE-2024-53165
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 27, 2024
Updated: Feb 11, 2025
CWE ID 416
Summary
CVE-2024-53165: A vulnerability has been identified and addressed in the Linux kernel's `sh` component. This issue involved a use-after-free bug in the `register_intc_controller()` function. In the error handling process, a variable `d` was freed without being removed from the `intc_list`, leading to a use-after-free condition. To rectify this issue, the addition of `d` to the list is now conditional upon successful execution.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.