Security Advisory

CVE-2024-49860

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-21 12:27:18
Last updated 2026-05-11 20:40:37
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.