What’s Vulnerable › Vulnerabilities

CVE-2024-23848

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-23 · updated 2026-10-15
• Weakness: CWE-416

Description

In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.

Affected products

• Linux kernel: through 6.7.1

References

• https://lore.kernel.org/lkml/e9f42704-2f99-4f2c-ade5-f952e5fd53e5%40xs4all.nl/
• https://lore.kernel.org/lkml/e9f42704-2f99-4f2c-ade5-f952e5fd53e5%40xs4all.nl/
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Get alerted when CVE-2024-23848 or the next vulnerability affects your stack