{"id":"DEBIAN-CVE-2024-53181","details":"In the Linux kernel, the following vulnerability has been resolved:  um: vector: Do not use drvdata in release  The drvdata is not available in release. Let's just use container_of() to get the vector_device instance. Otherwise, removing a vector device will result in a crash:  RIP: 0033:vector_device_release+0xf/0x50 RSP: 00000000e187bc40  EFLAGS: 00010202 RAX: 0000000060028f61 RBX: 00000000600f1baf RCX: 00000000620074e0 RDX: 000000006220b9c0 RSI: 0000000060551c80 RDI: 0000000000000000 RBP: 00000000e187bc50 R08: 00000000603ad594 R09: 00000000e187bb70 R10: 000000000000135a R11: 00000000603ad422 R12: 00000000623ae028 R13: 000000006287a200 R14: 0000000062006d30 R15: 00000000623700b6 Kernel panic - not syncing: Segfault with no mm CPU: 0 UID: 0 PID: 16 Comm: kworker/0:1 Not tainted 6.12.0-rc6-g59b723cd2adb #1 Workqueue: events mc_work_proc Stack:  60028f61 623ae028 e187bc80 60276fcd  6220b9c0 603f5820 623ae028 00000000  e187bcb0 603a2bcd 623ae000 62370010 Call Trace:  [\u003c60028f61\u003e] ? vector_device_release+0x0/0x50  [\u003c60276fcd\u003e] device_release+0x70/0xba  [\u003c603a2bcd\u003e] kobject_put+0xba/0xe7  [\u003c60277265\u003e] put_device+0x19/0x1c  [\u003c60281266\u003e] platform_device_put+0x26/0x29  [\u003c60281e5f\u003e] platform_device_unregister+0x2c/0x2e  [\u003c60029422\u003e] vector_remove+0x52/0x58  [\u003c60031316\u003e] ? mconsole_reply+0x0/0x50  [\u003c600310c8\u003e] mconsole_remove+0x160/0x1cc  [\u003c603b19f4\u003e] ? strlen+0x0/0x15  [\u003c60066611\u003e] ? __dequeue_entity+0x1a9/0x206  [\u003c600666a7\u003e] ? set_next_entity+0x39/0x63  [\u003c6006666e\u003e] ? set_next_entity+0x0/0x63  [\u003c60038fa6\u003e] ? um_set_signals+0x0/0x43  [\u003c6003070c\u003e] mc_work_proc+0x77/0x91  [\u003c60057664\u003e] process_scheduled_works+0x1b3/0x2dd  [\u003c60055f32\u003e] ? assign_work+0x0/0x58  [\u003c60057f0a\u003e] worker_thread+0x1e9/0x293  [\u003c6005406f\u003e] ? set_pf_worker+0x0/0x64  [\u003c6005d65d\u003e] ? arch_local_irq_save+0x0/0x2d  [\u003c6005d748\u003e] ? kthread_exit+0x0/0x3a  [\u003c60057d21\u003e] ? worker_thread+0x0/0x293  [\u003c6005dbf1\u003e] kthread+0x126/0x12b  [\u003c600219c5\u003e] new_thread_handler+0x85/0xb6","modified":"2026-09-15T09:03:16.284337920Z","published":"2024-12-27T14:15:25.530Z","upstream":["CVE-2024-53181"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-53181"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.123-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53181.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53181.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53181.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}