CVE-2024-53191

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 27, 2024
Updated: Jan 31, 2025
CWE ID 415

Summary

CVE-2024-53191 is a vulnerability affecting the Linux kernel's ath12k driver. During the unbinding process of a wifi device, certain buffers are released twice, leading to a double free condition. This error is particularly reproducible in virtual machines due to MSI addressing initialization failures. The result is a warning message and potential instability in the system. To mitigate this issue, the affected buffers should be set to NULL after release to prevent the double free scenario.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share