CVE-2024-39465

MEDIUM

Linux Kernel - Denial of Service via Double debugfs_remove_recursive Call

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: media: mgb4: Fix double debugfs remove Fixes an error where debugfs_remove_recursive() is called first on a parent directory and then again on a child which causes a kernel panic. [hverkuil: added Fixes/Cc tags]

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/252204b634efffd8b167d77413c93d0192aaf5f6

Patch

https://git.kernel.org/stable/c/825fc49497957310e421454fe3fb8b8d8d8e2dd2

Scores

CVSS v3 5.5

EPSS 0.0018

EPSS Percentile 8.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (9)

linux/Kernel 6.7.0 - 6.9.5linux

Linux/Linux < 6.7

Linux/Linux 0ab13674a9bd10514486cf1670d71dbd8afec421 - 252204b634efffd8b167d77413c93d0192aaf5f6

Linux/Linux 0ab13674a9bd10514486cf1670d71dbd8afec421 - 825fc49497957310e421454fe3fb8b8d8d8e2dd2

Linux/Linux 6.10

Linux/Linux 6.7

Linux/Linux 6.9.5 - 6.9.*

linux/linux_kernel 6.10 rc1 (2 CPE variants)

linux/linux_kernel 6.7 - 6.9.5

Published Jun 25, 2024

Tracked Since Feb 18, 2026