CVE-2024-42313
linux: In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close...
CVE-2024-42313 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-42313, released August 17, 2024. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0023
13th percentile
In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close There appears to be a possible use after free with vdec_close(). The firmware will add buffer release work to the work queue through HFI callbacks as a normal part of decoding. Randomly closing the decoder device from userspace during normal decoding can incur a read after free for inst. Fix it by cancelling the work in vdec_close.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| bpftool · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| dtb-aarch64 · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-64kb · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-64kb · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-azure · opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-azure · sles 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-debug · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-default · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-default-base · opensuse-leap 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-docs · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-kvmsmall · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-livepatch-SLE15-SP6-RT_Update_2 · sles 15.6 | 1-150600.1.3.2 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-livepatch-SLE15-SP6_Update_4 · sles 15.6 | 1-150600.13.3.3 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-obs-build · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-obs-qa · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-rt · opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-rt_debug · opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-source · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-source-azure · opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-source-azure · sles 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-source-rt · opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-syms · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-syms-azure · opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-syms-azure · sles 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-syms-rt · opensuse-leap 15.6 | 6.4.0-150600.10.8.1 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-uek · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-container · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-container · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12782 | Oct 14, 2024 |
| kernel-uek-container · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-container-debug · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-container-debug · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12782 | Oct 14, 2024 |
| kernel-uek-container-debug · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-core · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-core · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-debug · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-core · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-core · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-devel · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-devel · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-debug-devel · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-modules · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-modules · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-modules-extra · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-modules-extra · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-devel · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-devel · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-devel · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-doc · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-doc · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-doc · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-modules · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-modules · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-modules-extra · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-modules-extra · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-tools · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-tools-libs · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-zfcpdump · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-zfcpdump · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| linux · Debian 12.15 (bookworm) | 6.1.106-1 | DEBIAN-CVE-2024-42313 | Aug 17, 2024 |
| linux · Debian 13.5 (trixie) | 6.10.3-1 | DEBIAN-CVE-2024-42313 | Aug 17, 2024 |
| linux · Debian 14 | 6.10.3-1 | DEBIAN-CVE-2024-42313 | Aug 17, 2024 |
| perf · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12780 | Oct 11, 2024 |
| python-perf · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12780 | Oct 11, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.