Executive Summary

Informations
Name CVE-2024-35954 First vendor Publication 2024-05-20
Vendor Cve Last vendor Modification 2025-03-04

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 4.7
Base Score 4.7 Environmental Score 4.7
impact SubScore 3.6 Temporal Score 4.7
Exploitabality Sub Score 1
 
Attack Vector Local Attack Complexity High
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Avoid sg device teardown race

sg_remove_sfp_usercontext() must not use sg_device_destroy() after calling scsi_device_put().

sg_device_destroy() is accessing the parent scsi_device request_queue which will already be set to NULL when the preceding call to scsi_device_put() removed the last reference to the parent scsi_device.

The resulting NULL pointer exception will then crash the kernel.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35954

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-476 NULL Pointer Dereference

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3660

Sources (Detail)

https://git.kernel.org/stable/c/27f58c04a8f438078583041468ec60597841284d
https://git.kernel.org/stable/c/46af9047523e2517712ae8e71d984286c626e022
https://git.kernel.org/stable/c/b0d1ebcc1a9560e494ea9b3ee808540db26c5086
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
Date Informations
2025-07-15 02:33:57
  • Multiple Updates
2025-07-14 12:32:40
  • Multiple Updates
2025-06-26 02:31:24
  • Multiple Updates
2025-06-25 12:31:03
  • Multiple Updates
2025-06-24 02:36:05
  • Multiple Updates
2025-05-27 02:39:20
  • Multiple Updates
2025-03-29 03:36:49
  • Multiple Updates
2025-03-28 13:42:24
  • Multiple Updates
2025-03-28 03:15:41
  • Multiple Updates
2025-03-19 03:11:08
  • Multiple Updates
2025-03-18 03:23:57
  • Multiple Updates
2025-03-14 03:11:23
  • Multiple Updates
2025-03-06 14:07:46
  • Multiple Updates
2024-11-25 09:25:30
  • Multiple Updates
2024-05-20 17:27:25
  • First insertion