CVE-2024-49945: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.

Affected products

• Linux Linux Kernel: from 4.8, before 6.10.14 (fixed in 6.10.14); from 6.11, before 6.11.3 (fixed in 6.11.3); version 6.12 only

Published 2024-10-21. Last modified 2026-06-17.