CVE-2024-50027

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-50027
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50027.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50027
Downstream
Related
Published
2024-10-21T19:39:31Z
Modified
2025-10-14T14:39:12.177059Z
Summary
thermal: core: Free tzp copy along with the thermal zone
Details

In the Linux kernel, the following vulnerability has been resolved:

thermal: core: Free tzp copy along with the thermal zone

The object pointed to by tz->tzp may still be accessed after being freed in thermalzonedevice_unregister(), so move the freeing of it to the point after the removal completion has been completed at which it cannot be accessed any more.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3d439b1a2ad36c8b4ea151c8de25309d60d17407
Fixed
eabe285e1c629a719d6e68fc319939c63b83bf22
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3d439b1a2ad36c8b4ea151c8de25309d60d17407
Fixed
bdb0d40507c85bee33c2a71fde7b2e857346f112
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3d439b1a2ad36c8b4ea151c8de25309d60d17407
Fixed
827a07525c099f54d3b15110408824541ec66b3c

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.2
v6.11.3
v6.12-rc1
v6.3
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2024-50027-0a037478",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@827a07525c099f54d3b15110408824541ec66b3c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "147927779243902978690935622246295141701",
                    "93129296822277917440823345929454194643",
                    "73956415839039915901465002430203097431",
                    "116631578374888086874289186746088241264",
                    "236929563837054966066939015969079407882",
                    "141251351597951788543009404310855064635",
                    "37050368564451676149363148993332069080"
                ]
            },
            "target": {
                "file": "drivers/thermal/thermal_core.c"
            }
        },
        {
            "id": "CVE-2024-50027-114a28b0",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eabe285e1c629a719d6e68fc319939c63b83bf22",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 899.0,
                "function_hash": "208301217753702196853357373397128394039"
            },
            "target": {
                "file": "drivers/thermal/thermal_core.c",
                "function": "thermal_zone_device_unregister"
            }
        },
        {
            "id": "CVE-2024-50027-25b7a33c",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdb0d40507c85bee33c2a71fde7b2e857346f112",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 888.0,
                "function_hash": "236107870157956808896356011221464681297"
            },
            "target": {
                "file": "drivers/thermal/thermal_core.c",
                "function": "thermal_zone_device_unregister"
            }
        },
        {
            "id": "CVE-2024-50027-a4b98c8f",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@827a07525c099f54d3b15110408824541ec66b3c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 846.0,
                "function_hash": "11192148376628869222106740693337704629"
            },
            "target": {
                "file": "drivers/thermal/thermal_core.c",
                "function": "thermal_zone_device_unregister"
            }
        },
        {
            "id": "CVE-2024-50027-c7bbe661",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eabe285e1c629a719d6e68fc319939c63b83bf22",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "147927779243902978690935622246295141701",
                    "93129296822277917440823345929454194643",
                    "131252108982540215952674021986643982922",
                    "263120218741479513960375642711963392002",
                    "280437760161041790237688966127898496043",
                    "7956190986543741209112054150714935183",
                    "37050368564451676149363148993332069080"
                ]
            },
            "target": {
                "file": "drivers/thermal/thermal_core.c"
            }
        },
        {
            "id": "CVE-2024-50027-fe7a02e8",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdb0d40507c85bee33c2a71fde7b2e857346f112",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "147927779243902978690935622246295141701",
                    "93129296822277917440823345929454194643",
                    "73956415839039915901465002430203097431",
                    "116631578374888086874289186746088241264",
                    "236929563837054966066939015969079407882",
                    "141251351597951788543009404310855064635",
                    "37050368564451676149363148993332069080"
                ]
            },
            "target": {
                "file": "drivers/thermal/thermal_core.c"
            }
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.6.60
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.4