CVE-2024-42280
kernel: mISDN: Fix a use after free in hfcmulti_tx()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 17, 2024
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
mISDN: Fix a use after free in hfcmulti_tx()
Don't dereference *sp after calling dev_kfree_skb(*sp).
Statement
This vulnerability is rated as Moderate because it requires local access and the presence of specialized ISDN hardware controllers. The affected mISDN driver is not loaded by default in standard Red Hat Enterprise Linux environments and is only utilized when relevant multi-port ISDN hardware is attached. A local user with administrative access could trigger this flaw to induce a kernel crash or potentially escalate privileges.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-416 · Use After Free