# CVE-2024-39495: linux: In the Linux kernel, the following vulnerability has been resolved:  greybus: Fix use-after-free bug in gb_interface_...

CVE-2024-39495 is fixed in 19 products on 1 platform, first by DEBIAN-CVE-2024-39495, released July 12, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-39495
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0032
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 12, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.  In gb_interface_create, &intf->mode_switch_completion is bound with gb_interface_mode_switch_work. Then it will be started by gb_interface_request_mode_switch. Here is the relevant code. if (!queue_work(system_long_wq, &intf->mode_switch_work)) { 	... }  If we call gb_interface_release to make cleanup, there may be an unfinished work. This function will call kfree to free the object "intf". However, if gb_interface_mode_switch_work is scheduled to run after kfree, it may cause use-after-free error as gb_interface_mode_switch_work will use the object "intf". The possible execution flow that may lead to the issue is as follows:  CPU0                            CPU1                              |   gb_interface_create                             |   gb_interface_request_mode_switch gb_interface_release        | kfree(intf) (free)          |                             |   gb_interface_mode_switch_work                             |   mutex_lock(&intf->mutex) (use)  Fix it by canceling the work before kfree.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | bpftool ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek ol 8 | 0:5.4.17-2136.335.4.el8uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |
| Linux | kernel-uek ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-container ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-container ol 8 | 0:5.4.17-2136.335.4.el8 | [ELSA-2024-12612](https://patchblox.com/security/data/fix/linux/elsa-2024-12612.md) | Sep 11, 2024 |
| Linux | kernel-uek-container ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.4.17-2136.335.4.el8 | [ELSA-2024-12612](https://patchblox.com/security/data/fix/linux/elsa-2024-12612.md) | Sep 11, 2024 |
| Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-core ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-core ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug ol 8 | 0:5.4.17-2136.335.4.el8uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |
| Linux | kernel-uek-debug ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.4.17-2136.335.4.el8uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |
| Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-devel ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-devel ol 8 | 0:5.4.17-2136.335.4.el8uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |
| Linux | kernel-uek-devel ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-doc ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-doc ol 8 | 0:5.4.17-2136.335.4.el8uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |
| Linux | kernel-uek-doc ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-modules ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-modules ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-210.163.7.el9uek | [ELSA-2024-12618](https://patchblox.com/security/data/fix/linux/elsa-2024-12618.md) | Sep 12, 2024 |
| Linux | kernel-uek-tools ol 8 | 0:5.4.17-2136.335.4.el7uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |
| Linux | kernel-uek-tools-libs ol 8 | 0:5.4.17-2136.335.4.el7uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.99-1 | [DEBIAN-CVE-2024-39495](https://patchblox.com/security/data/fix/linux/debian-cve-2024-39495.md) | Jul 12, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.9.7-1 | [DEBIAN-CVE-2024-39495](https://patchblox.com/security/data/fix/linux/debian-cve-2024-39495.md) | Jul 12, 2024 |
| Linux | linux Debian 14 | 6.9.7-1 | [DEBIAN-CVE-2024-39495](https://patchblox.com/security/data/fix/linux/debian-cve-2024-39495.md) | Jul 12, 2024 |
| Linux | perf ol 8 | 0:5.4.17-2136.335.4.el7uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |
| Linux | python-perf ol 8 | 0:5.4.17-2136.335.4.el7uek | [ELSA-2024-12610](https://patchblox.com/security/data/fix/linux/elsa-2024-12610.md) | Sep 10, 2024 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.