CVE-2024-54458

Summary

CVE-2024-54458 is a vulnerability identified in the Linux kernel's SCSI subsystem, specifically in the ufs driver's bsg component. This issue involves failing to set the bsg_queue to NULL after its removal. While this oversight does not currently cause any problems, it potentially leaves room for a use-after-free (UAF) vulnerability. By not setting the bsg_queue to NULL after removal, there is a risk that an attacker could exploit the freed memory, potentially leading to unintended consequences or system crashes. The Linux kernel team has addressed this vulnerability in a recent patch release.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.