CVE-2024-57984

Summary

CVE-2024-57984 is a use-after-free vulnerability in the Linux kernel's i3c driver. The issue arises due to a race condition in the dw_i3c_master driver, where the work associated with the driver is not canceled before the cleanup process begins. Specifically, the master->base is freed in i3c_master_unregister while the work is still being used in i3c_master_do_daa. This sequence of events can result in a use-after-free bug, leading to potential exploitation. To mitigate the issue, the work must be canceled before the cleanup process commences in dw_i3c_common_remove.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.