Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UAF race during unregistering where the sysctl attributes were usable after the info struct was freed.

INFO

Published Date :

2024-10-21T18:01:49.732Z

Last Modified :

2025-11-03T20:42:00.980Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-49925 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-49925.

URL Resource
https://git.kernel.org/stable/c/2a9c40c72097b583b23aeb2a26d429ccfc81fbc1 cve-icon cve-icon
https://git.kernel.org/stable/c/36bfefb6baaa8e46de44f4fd919ce4347337620f cve-icon cve-icon
https://git.kernel.org/stable/c/4684d69b9670a83992189f6271dc0fcdec4ed0d7 cve-icon cve-icon
https://git.kernel.org/stable/c/872cd2d029d2c970a8a1eea88b48dab2b3f2e93a cve-icon cve-icon
https://git.kernel.org/stable/c/95cdd538e0e5677efbdf8aade04ec098ab98f457 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024102124-CVE-2024-49925-b469@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-49925 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-49925 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact