CVE-2024-27054
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix double module refcount decrement Once the discipline is associated with the device, deleting the device takes care of decrementing the module's refcount.
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix double module refcount decrement Once the discipline is associated with the device, deleting the device takes care of decrementing the module's refcount. Doing it manually on this error path causes refcount to artificially decrease on each error while it should just stay the same.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.27% probability · 20th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/9fe0562179d8fa960afca0eaed6d4ba4122a3cc6
- https://git.kernel.org/stable/c/ad999aa18103fa038787b6a8a55020abcf34df1aPatch
- https://git.kernel.org/stable/c/c3116e62ddeff79cae342147753ce596f01fcf06Patch
- https://git.kernel.org/stable/c/ebc5a3bd79e54f98c885c26f0862a27a02c487c5Patch
- https://git.kernel.org/stable/c/ec09bcab32fc4765e0cc97e1b72cdd067135f37ePatch
- https://git.kernel.org/stable/c/edbdb0d94143db46edd373cc93e433832d29fe19Patch
- https://git.kernel.org/stable/c/fa18aa507ea71d8914b6acb2c94db311c757c650Patch
- https://git.kernel.org/stable/c/ad999aa18103fa038787b6a8a55020abcf34df1aPatch
- https://git.kernel.org/stable/c/c3116e62ddeff79cae342147753ce596f01fcf06Patch
- https://git.kernel.org/stable/c/ebc5a3bd79e54f98c885c26f0862a27a02c487c5Patch
- https://git.kernel.org/stable/c/ec09bcab32fc4765e0cc97e1b72cdd067135f37ePatch
- https://git.kernel.org/stable/c/edbdb0d94143db46edd373cc93e433832d29fe19Patch
- https://git.kernel.org/stable/c/fa18aa507ea71d8914b6acb2c94db311c757c650Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.