Executive Summary

Informations
Name CVE-2024-50051 First vendor Publication 2025-01-11
Vendor Cve Last vendor Modification 2025-02-10

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 7.8
Base Score 7.8 Environmental Score 7.8
impact SubScore 5.9 Temporal Score 7.8
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

spi: mpc52xx: Add cancel_work_sync before module remove

If we remove the module which will call mpc52xx_spi_remove it will free 'ms' through spi_unregister_controller. while the work ms->work will be used. The sequence of operations that may lead to a UAF bug.

Fix it by ensuring that the work is canceled before proceeding with the cleanup in mpc52xx_spi_remove.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50051

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-416 Use After Free

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3701

Sources (Detail)

https://git.kernel.org/stable/c/373d55a47dc662e5e30d12ad5d334312f757c1f1
https://git.kernel.org/stable/c/90b72189de2cddacb26250579da0510b29a8b82b
https://git.kernel.org/stable/c/984836621aad98802d92c4a3047114cf518074c8
https://git.kernel.org/stable/c/cd5106c77d6d6828aa82449f01f4eb436d602a21
https://git.kernel.org/stable/c/d0cde3911cf24e1bcdd4caa1d1b9ef57589db5a1
https://git.kernel.org/stable/c/e0c6ce8424095c2da32a063d3fc027494c689817
https://git.kernel.org/stable/c/f65d85bc1ffd8a2c194bb2cd65e35ed3648ddd59
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
Date Informations
2025-06-26 02:36:33
  • Multiple Updates
2025-06-25 12:34:58
  • Multiple Updates
2025-06-24 02:41:12
  • Multiple Updates
2025-05-27 02:46:21
  • Multiple Updates
2025-03-29 03:42:23
  • Multiple Updates
2025-03-28 13:46:13
  • Multiple Updates
2025-03-28 03:20:08
  • Multiple Updates
2025-03-19 03:15:25
  • Multiple Updates
2025-03-18 03:28:22
  • Multiple Updates
2025-03-14 03:15:36
  • Multiple Updates
2025-03-06 14:12:09
  • Multiple Updates
2025-02-22 03:25:43
  • Multiple Updates
2025-02-11 17:20:36
  • Multiple Updates
2025-02-03 21:20:37
  • Multiple Updates
2025-01-11 17:20:27
  • First insertion