CVE - CVE-2024-54458

CVE-ID
CVE-2024-54458	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not cause any issues, but I believe it is necessary to set bsg_queue to NULL after removing it to prevent potential use-after-free (UAF) access.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1e95c798d8a7f70965f0f88d4657b682ff0ec75f URL:https://git.kernel.org/stable/c/1e95c798d8a7f70965f0f88d4657b682ff0ec75f MISC:https://git.kernel.org/stable/c/5e7b6e44468c3242c21c2a8656d009fb3eb50a73 URL:https://git.kernel.org/stable/c/5e7b6e44468c3242c21c2a8656d009fb3eb50a73 MISC:https://git.kernel.org/stable/c/5f782d4741bf558def60df192b858b0efc6a5f0a URL:https://git.kernel.org/stable/c/5f782d4741bf558def60df192b858b0efc6a5f0a MISC:https://git.kernel.org/stable/c/88a01e9c9ad40c075756ba93b47984461d4ff15d URL:https://git.kernel.org/stable/c/88a01e9c9ad40c075756ba93b47984461d4ff15d MISC:https://git.kernel.org/stable/c/9193bdc170cc23fe98aca71d1a63c0bf6e1e853b URL:https://git.kernel.org/stable/c/9193bdc170cc23fe98aca71d1a63c0bf6e1e853b
Assigning CNA
kernel.org
Date Record Created
20250227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)