CVE-2024-47732

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a potential use after free bug in the crypto: iaa module of the Linux kernel. Specifically, the free device compression mode(iaa device, device mode) function frees the device mode but it is passed to iaa compression modes[i]->free() later, resulting in a use after free. This bug is currently in dead code and does not implement the ->free() function, but the fix is in place for when it might be implemented in the future. The exploitation of this bug could potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.