Medium 5.5Published Oct 21, 2024

CVE-2024-49955ACPI: battery: Fix possible crash when unregistering a battery hook

Updated under an hour ago (Oct 27, 2026, 4:23 AM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook provider cannot know that, so it will later call battery_hook_unregister() on the already unregistered battery hook, resulting in a crash. Fix this by using the list head to mark already unregistered battery hooks as already being unregistered so that they can be ignored by battery_hook_unregister().

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from fa93854f7a7ed63d054405bf3779247d5300edd3 before 76fb2cbf01571926da8ecf6876cc8cb07d3f5183; from fa93854f7a7ed63d054405bf3779247d5300edd3 before c47843a831e0eae007ad7e848d208e675ba4c132; from fa93854f7a7ed63d054405bf3779247d5300edd3 before da964de4c18199e14b961b5b2e5e6570552a313c; from fa93854f7a7ed63d054405bf3779247d5300edd3 before 07b98400cb0285a6348188aa8c5ec6a2ae0551f7; from fa93854f7a7ed63d054405bf3779247d5300edd3 before ca1fb7942a287b40659cc79551a1de54a2c2e7d5; from fa93854f7a7ed63d054405bf3779247d5300edd3 before ce31847f109c3a5b2abdd19d7bcaafaacfde53de; from fa93854f7a7ed63d054405bf3779247d5300edd3 before ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b; from fa93854f7a7ed63d054405bf3779247d5300edd3 before 9f469ef1c79dac7f9ac1518643a33703918f7e13; and 1 more ranges	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.2	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.17 before 5.10.227; from 5.11 before 5.15.168; from 5.16 before 6.1.113; from 6.2 before 6.6.55; from 6.7 before 6.10.14; from 6.11 before 6.11.3; 6.12	NVD

References

References

https://git.kernel.org/stable/c/76fb2cbf01571926da8ecf6876cc8cb07d3f5183
https://git.kernel.org/stable/c/c47843a831e0eae007ad7e848d208e675ba4c132
https://git.kernel.org/stable/c/da964de4c18199e14b961b5b2e5e6570552a313c	patch
https://git.kernel.org/stable/c/07b98400cb0285a6348188aa8c5ec6a2ae0551f7	patch
https://git.kernel.org/stable/c/ca1fb7942a287b40659cc79551a1de54a2c2e7d5	patch
https://git.kernel.org/stable/c/ce31847f109c3a5b2abdd19d7bcaafaacfde53de	patch
https://git.kernel.org/stable/c/ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b	patch
https://git.kernel.org/stable/c/9f469ef1c79dac7f9ac1518643a33703918f7e13	patch
https://git.kernel.org/stable/c/76959aff14a0012ad6b984ec7686d163deccdc16	patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
1–10 of 13

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.