{"id":"DEBIAN-CVE-2024-53092","details":"In the Linux kernel, the following vulnerability has been resolved:  virtio_pci: Fix admin vq cleanup by using correct info pointer  vp_modern_avq_cleanup() and vp_del_vqs() clean up admin vq resources by virtio_pci_vq_info pointer. The info pointer of admin vq is stored in vp_dev-\u003eadmin_vq.info instead of vp_dev-\u003evqs[]. Using the info pointer from vp_dev-\u003evqs[] for admin vq causes a kernel NULL pointer dereference bug. In vp_modern_avq_cleanup() and vp_del_vqs(), get the info pointer from vp_dev-\u003eadmin_vq.info for admin vq to clean up the resources. Also make info ptr as argument of vp_del_vq() to be symmetric with vp_setup_vq().  vp_reset calls vp_modern_avq_cleanup, and causes the Call Trace: ================================================================== BUG: kernel NULL pointer dereference, address:0000000000000000 ... CPU: 49 UID: 0 PID: 4439 Comm: modprobe Not tainted 6.11.0-rc5 #1 RIP: 0010:vp_reset+0x57/0x90 [virtio_pci] Call Trace:  \u003cTASK\u003e ...  ? vp_reset+0x57/0x90 [virtio_pci]  ? vp_reset+0x38/0x90 [virtio_pci]  virtio_reset_device+0x1d/0x30  remove_vq_common+0x1c/0x1a0 [virtio_net]  virtnet_remove+0xa1/0xc0 [virtio_net]  virtio_dev_remove+0x46/0xa0 ...  virtio_pci_driver_exit+0x14/0x810 [virtio_pci] ==================================================================","modified":"2026-10-01T11:03:39.857980605Z","published":"2024-11-21T19:15:12.380Z","upstream":["CVE-2024-53092"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-53092"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.9-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53092.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.9-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53092.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}