BaselineWatch
Desk

CVE-2024-49945

5.5 medium SSVC exploitation: none Modified

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.

Fix

Patch, vendor advisory and mitigation references on NVD 3

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 5

  1. CwesCWE-416NVD modified 2026-10-21 13:17
  2. Cpes+2 CPE criteria (now 2)NVD modified 2026-10-21 13:17
  3. StatusPublished → ModifiedNVD modified 2026-10-21 13:17
  4. CVSS5.5 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)NVD modified 2026-10-21 13:17
  5. First seenunscored · linuxNVD modified 2026-10-21 12:35

Affected (CPE criteria) 2

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*

References 4