CVE-2024-53064

In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again. In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.

• CWE-476
• CWE-476

• https://git.kernel.org/stable/c/683fcd90ba22507ebeb1921a26dfe77efff8c266Patch
• https://git.kernel.org/stable/c/9b58031ff96b84a38d7b73b23c7ecfb2e0557f43Patch

Published

Nov 19, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53059In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-5306Kofax Power PDF PDF File Parsing Memory Corruption Remote Co…7.8
• CVE-2024-53060In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53061In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-53062In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-53063In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53065In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53066In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53067In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53068In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-53069In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5307Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Infor…3.3