High 7.4Published Dec 27, 2024

CVE-2024-53165sh: intc: Fix use-after-free bug in register_intc_controller()

Updated under an hour ago (Oct 27, 2026, 6:00 AM ET)

Does this affect you?

It affects Linux and 7 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let's only add it to the list after everything has succeeded.

CVSS: 7.4 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-416
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 2dcec7a988a1895540460a0bf5603bab63d5a3ed before 3c7c806b3eafd94ae0f77305a174d63b69ec187c; from 2dcec7a988a1895540460a0bf5603bab63d5a3ed before d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc; from 2dcec7a988a1895540460a0bf5603bab63d5a3ed before 971b4893457788e0e123ea552f0bb126a5300e61; from 2dcec7a988a1895540460a0bf5603bab63d5a3ed before c3f4f4547fb291982f5ef56c048277c4d5ccc4e4; from 2dcec7a988a1895540460a0bf5603bab63d5a3ed before c43df7dae28fb9fce96ef088250c1e3c3a77c527; from 2dcec7a988a1895540460a0bf5603bab63d5a3ed before b8b84dcdf3ab1d414304819f824b10efba64132c; from 2dcec7a988a1895540460a0bf5603bab63d5a3ed before 6ba6e19912570b2ad68298be0be1dc779014a303; from 2dcec7a988a1895540460a0bf5603bab63d5a3ed before 588bdec1ff8b81517dbae0ae51c9df52c0b952d3; and 1 more ranges	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.2	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.30 before 4.19.325; from 4.20 before 5.4.287; from 5.5 before 5.10.231; from 5.11 before 5.15.174; from 5.16 before 6.1.120; from 6.2 before 6.6.64; from 6.7 before 6.11.11; from 6.12 before 6.12.2	NVD

References

References

https://git.kernel.org/stable/c/3c7c806b3eafd94ae0f77305a174d63b69ec187c	patch
https://git.kernel.org/stable/c/d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc	patch
https://git.kernel.org/stable/c/971b4893457788e0e123ea552f0bb126a5300e61	patch
https://git.kernel.org/stable/c/c3f4f4547fb291982f5ef56c048277c4d5ccc4e4	patch
https://git.kernel.org/stable/c/c43df7dae28fb9fce96ef088250c1e3c3a77c527	patch
https://git.kernel.org/stable/c/b8b84dcdf3ab1d414304819f824b10efba64132c	patch
https://git.kernel.org/stable/c/6ba6e19912570b2ad68298be0be1dc779014a303	patch
https://git.kernel.org/stable/c/588bdec1ff8b81517dbae0ae51c9df52c0b952d3	patch
https://git.kernel.org/stable/c/63e72e551942642c48456a4134975136cdcb9b3c	patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.