https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:30:19 +0000 https://cve.radiocsirt.org/vuln/cve-2024-49981 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: venus: fix use after free bug in venus_remove due to race condition</p> <p>in venus_probe, core-&gt;work is bound with venus_sys_error_handler, which is used to handle error. The code use core-&gt;sys_err_done to make sync work. The core-&gt;work is started in venus_event_notify.</p> <p>If we call venus_remove, there might be an unfished work. The possible sequence is as follows:</p> <p>CPU0 CPU1</p> <p>|venus_sys_error_handler venus_remove | hfi_destroy | venus_hfi_destroy | kfree(hdev); | |hfi_reinit |venus_hfi_queues_reinit |//use hdev</p> <p>Fix it by canceling the work in venus_remove.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: venus: fix use after free bug in venus_remove due to race condition</p> <p>in venus_probe, core-&gt;work is bound with venus_sys_error_handler, which is used to handle error. The code use core-&gt;sys_err_done to make sync work. The core-&gt;work is started in venus_event_notify.</p> <p>If we call venus_remove, there might be an unfished work. The possible sequence is as follows:</p> <p>CPU0 CPU1</p> <p>|venus_sys_error_handler venus_remove | hfi_destroy | venus_hfi_destroy | kfree(hdev); | |hfi_reinit |venus_hfi_queues_reinit |//use hdev</p> <p>Fix it by canceling the work in venus_remove.</p> https://cve.radiocsirt.org/vuln/cve-2024-49981