CVE-2024-27043

A flaw was found in the Linux kernel's Digital Video Broadcasting (DVB) subsystem. When an error occurs during device registration in the dvb_register_device() function, the kernel deallocates the device structure but fails to reset the associated pointer, leaving a dangling reference. A local attacker could exploit this use-after-free vulnerability during subsequent device unregistration or cleanup routines, causing a kernel crash that results in a denial of service (DoS) or potentially leading to arbitrary code execution.

This vulnerability is rated as having a Low impact because exploitation requires specialized digital video broadcasting hardware or physical access to attach devices, alongside high local privileges. In typical enterprise and cloud environments, DVB hardware is absent, substantially limiting exposure. Furthermore, triggering the condition relies on inducing an initialization failure followed by cleanup routines, making practical exploitation difficult and primarily resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.