CVE-2024-44998

CriticalCVSS 9.8

Published: 04/09/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile - higher than 17% of all known CVEs

Summary

A use-after-free in the ATM idt77252 driver of the Linux kernel was found in dequeue_rx(). After calling vcc->push(), the skb cannot be dereferenced because it has been freed.

Risk Assessment

This can lead to system crashes or potential code execution by an attacker able to send packets to the ATM interface.

Recommendation

Apply a Linux kernel update containing the fix that prevents dereferencing skb after vcc->push().

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereference "skb" after calling vcc->push() because the skb is released.