{"id":"DEBIAN-CVE-2024-53183","details":"In the Linux kernel, the following vulnerability has been resolved:  um: net: Do not use drvdata in release  The drvdata is not available in release. Let's just use container_of() to get the uml_net instance. Otherwise, removing a network device will result in a crash:  RIP: 0033:net_device_release+0x10/0x6f RSP: 00000000e20c7c40  EFLAGS: 00010206 RAX: 000000006002e4e7 RBX: 00000000600f1baf RCX: 00000000624074e0 RDX: 0000000062778000 RSI: 0000000060551c80 RDI: 00000000627af028 RBP: 00000000e20c7c50 R08: 00000000603ad594 R09: 00000000e20c7b70 R10: 000000000000135a R11: 00000000603ad422 R12: 0000000000000000 R13: 0000000062c7af00 R14: 0000000062406d60 R15: 00000000627700b6 Kernel panic - not syncing: Segfault with no mm CPU: 0 UID: 0 PID: 29 Comm: kworker/0:2 Not tainted 6.12.0-rc6-g59b723cd2adb #1 Workqueue: events mc_work_proc Stack:  627af028 62c7af00 e20c7c80 60276fcd  62778000 603f5820 627af028 00000000  e20c7cb0 603a2bcd 627af000 62770010 Call Trace:  [\u003c60276fcd\u003e] device_release+0x70/0xba  [\u003c603a2bcd\u003e] kobject_put+0xba/0xe7  [\u003c60277265\u003e] put_device+0x19/0x1c  [\u003c60281266\u003e] platform_device_put+0x26/0x29  [\u003c60281e5f\u003e] platform_device_unregister+0x2c/0x2e  [\u003c6002ec9c\u003e] net_remove+0x63/0x69  [\u003c60031316\u003e] ? mconsole_reply+0x0/0x50  [\u003c600310c8\u003e] mconsole_remove+0x160/0x1cc  [\u003c60087d40\u003e] ? __remove_hrtimer+0x38/0x74  [\u003c60087ff8\u003e] ? hrtimer_try_to_cancel+0x8c/0x98  [\u003c6006b3cf\u003e] ? dl_server_stop+0x3f/0x48  [\u003c6006b390\u003e] ? dl_server_stop+0x0/0x48  [\u003c600672e8\u003e] ? dequeue_entities+0x327/0x390  [\u003c60038fa6\u003e] ? um_set_signals+0x0/0x43  [\u003c6003070c\u003e] mc_work_proc+0x77/0x91  [\u003c60057664\u003e] process_scheduled_works+0x1b3/0x2dd  [\u003c60055f32\u003e] ? assign_work+0x0/0x58  [\u003c60057f0a\u003e] worker_thread+0x1e9/0x293  [\u003c6005406f\u003e] ? set_pf_worker+0x0/0x64  [\u003c6005d65d\u003e] ? arch_local_irq_save+0x0/0x2d  [\u003c6005d748\u003e] ? kthread_exit+0x0/0x3a  [\u003c60057d21\u003e] ? worker_thread+0x0/0x293  [\u003c6005dbf1\u003e] kthread+0x126/0x12b  [\u003c600219c5\u003e] new_thread_handler+0x85/0xb6","modified":"2026-09-15T09:03:16.196750345Z","published":"2024-12-27T14:15:25.743Z","upstream":["CVE-2024-53183"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-53183"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.123-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53183.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53183.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53183.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}