CVE-2024-27054

MEDIUM

Linux Kernel - Double Module Refcount Decrement

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix double module refcount decrement Once the discipline is associated with the device, deleting the device takes care of decrementing the module's refcount. Doing it manually on this error path causes refcount to artificially decrease on each error while it should just stay the same.

References (7)

Core 7

Scores

CVSS v3 5.5
EPSS 0.0027
EPSS Percentile 19.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (23)
linux/Kernel 4.9.0 - 5.10.237linux
linux/Kernel 5.11.0 - 5.15.153linux
linux/Kernel 5.16.0 - 6.1.83linux
linux/Kernel 6.2.0 - 6.6.23linux
linux/Kernel 6.7.0 - 6.7.11linux
linux/Kernel 6.8.0 - 6.8.2linux
Linux/Linux < 4.9
Linux/Linux 4.9
Linux/Linux 5.10.237 - 5.10.*
Linux/Linux 5.15.153 - 5.15.*
... and 13 more
Published May 01, 2024
Tracked Since Feb 18, 2026