CVE-2024-23848

Updated: 2025-08-20 01:45:34.689265

Description:

In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

Oracle Linux 7 ELS kernel-uek 5.4.17 5.5 MEDIUM Ignored 2025-06-24 00:42:08 Ignored due to low severity
RHEL 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-05-24 02:24:39 Ignored due to low severity
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Released CLSA-2025:1742321198 2025-03-18 23:47:57
Ubuntu 16.04 ELS linux 4.4.0 5.5 MEDIUM Ignored 2025-03-21 03:35:59
Ubuntu 18.04 ELS linux 4.15.0 5.5 MEDIUM Released CLSA-2025:1742319747 2025-03-18 23:47:55
Total: 15