GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-53227 (GCVE-0-2024-53227)

Vulnerability from cvelistv5 – Published: 2024-12-27 13:50 – Updated: 2026-05-11 20:53
VLAI
Title
scsi: bfa: Fix use-after-free in bfad_im_module_exit()
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfad_im_module_exit() BUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20 Read of size 8 at addr ffff8881082d80c8 by task modprobe/25303 Call Trace: <TASK> dump_stack_lvl+0x95/0xe0 print_report+0xcb/0x620 kasan_report+0xbd/0xf0 __lock_acquire+0x2aca/0x3a20 lock_acquire+0x19b/0x520 _raw_spin_lock+0x2b/0x40 attribute_container_unregister+0x30/0x160 fc_release_transport+0x19/0x90 [scsi_transport_fc] bfad_im_module_exit+0x23/0x60 [bfa] bfad_init+0xdb/0xff0 [bfa] do_one_initcall+0xdc/0x550 do_init_module+0x22d/0x6b0 load_module+0x4e96/0x5ff0 init_module_from_file+0xcd/0x130 idempotent_init_module+0x330/0x620 __x64_sys_finit_module+0xb3/0x110 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> Allocated by task 25303: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x7f/0x90 fc_attach_transport+0x4f/0x4740 [scsi_transport_fc] bfad_im_module_init+0x17/0x80 [bfa] bfad_init+0x23/0xff0 [bfa] do_one_initcall+0xdc/0x550 do_init_module+0x22d/0x6b0 load_module+0x4e96/0x5ff0 init_module_from_file+0xcd/0x130 idempotent_init_module+0x330/0x620 __x64_sys_finit_module+0xb3/0x110 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 25303: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3b/0x60 __kasan_slab_free+0x38/0x50 kfree+0x212/0x480 bfad_im_module_init+0x7e/0x80 [bfa] bfad_init+0x23/0xff0 [bfa] do_one_initcall+0xdc/0x550 do_init_module+0x22d/0x6b0 load_module+0x4e96/0x5ff0 init_module_from_file+0xcd/0x130 idempotent_init_module+0x330/0x620 __x64_sys_finit_module+0xb3/0x110 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f Above issue happens as follows: bfad_init error = bfad_im_module_init() fc_release_transport(bfad_im_scsi_transport_template); if (error) goto ext; ext: bfad_im_module_exit(); fc_release_transport(bfad_im_scsi_transport_template); --> Trigger double release Don't call bfad_im_module_exit() if bfad_im_module_init() failed.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-11 15:43 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < 0ceac8012d3ddea3317f0d82934293d05feb8af1 (git)
Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < 3932c753f805a02e9364a4c58b590f21901f8490 (git)
Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < ef2c2580189ea88a0dcaf56eb3a565763a900edb (git)
Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < e76181a5be90abcc3ed8a300bd13878aa214d022 (git)
Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < 8f5a97443b547b4c83f876f1d6a11df0f1fd4efb (git)
Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < c28409f851abd93b37969cac7498828ad533afd9 (git)
Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < 1ffdde30a90bf8efe8f270407f486706962b3292 (git)
Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < a2b5035ab0e368e8d8a371e27fbc72f133c0bd40 (git)
Affected: 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e , < 178b8f38932d635e90f5f0e9af1986c6f4a89271 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.32
Unaffected: 0 , < 2.6.32 (semver)
Unaffected: 4.19.325 , ≤ 4.19.* (semver)
Unaffected: 5.4.287 , ≤ 5.4.* (semver)
Unaffected: 5.10.231 , ≤ 5.10.* (semver)
Unaffected: 5.15.174 , ≤ 5.15.* (semver)
Unaffected: 6.1.120 , ≤ 6.1.* (semver)
Unaffected: 6.6.64 , ≤ 6.6.* (semver)
Unaffected: 6.11.11 , ≤ 6.11.* (semver)
Unaffected: 6.12.2 , ≤ 6.12.* (semver)
Unaffected: 6.13 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-53227",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-11T15:43:06.746226Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-11T15:45:25.837Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:47:54.103Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/bfa/bfad.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0ceac8012d3ddea3317f0d82934293d05feb8af1",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            },
            {
              "lessThan": "3932c753f805a02e9364a4c58b590f21901f8490",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            },
            {
              "lessThan": "ef2c2580189ea88a0dcaf56eb3a565763a900edb",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            },
            {
              "lessThan": "e76181a5be90abcc3ed8a300bd13878aa214d022",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            },
            {
              "lessThan": "8f5a97443b547b4c83f876f1d6a11df0f1fd4efb",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            },
            {
              "lessThan": "c28409f851abd93b37969cac7498828ad533afd9",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            },
            {
              "lessThan": "1ffdde30a90bf8efe8f270407f486706962b3292",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            },
            {
              "lessThan": "a2b5035ab0e368e8d8a371e27fbc72f133c0bd40",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            },
            {
              "lessThan": "178b8f38932d635e90f5f0e9af1986c6f4a89271",
              "status": "affected",
              "version": "7725ccfda59715ecf8f99e3b520a0b84cc2ea79e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/bfa/bfad.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.32"
            },
            {
              "lessThan": "2.6.32",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.325",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.287",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.231",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.174",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.120",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.325",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.287",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.231",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.174",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.120",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.64",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.11",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.2",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x95/0xe0\n print_report+0xcb/0x620\n kasan_report+0xbd/0xf0\n __lock_acquire+0x2aca/0x3a20\n lock_acquire+0x19b/0x520\n _raw_spin_lock+0x2b/0x40\n attribute_container_unregister+0x30/0x160\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\n bfad_im_module_exit+0x23/0x60 [bfa]\n bfad_init+0xdb/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nAllocated by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x7f/0x90\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\n bfad_im_module_init+0x17/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x38/0x50\n kfree+0x212/0x480\n bfad_im_module_init+0x7e/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAbove issue happens as follows:\n\nbfad_init\n  error = bfad_im_module_init()\n    fc_release_transport(bfad_im_scsi_transport_template);\n  if (error)\n    goto ext;\n\next:\n  bfad_im_module_exit();\n    fc_release_transport(bfad_im_scsi_transport_template);\n    --\u003e Trigger double release\n\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:53:18.703Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0ceac8012d3ddea3317f0d82934293d05feb8af1"
        },
        {
          "url": "https://git.kernel.org/stable/c/3932c753f805a02e9364a4c58b590f21901f8490"
        },
        {
          "url": "https://git.kernel.org/stable/c/ef2c2580189ea88a0dcaf56eb3a565763a900edb"
        },
        {
          "url": "https://git.kernel.org/stable/c/e76181a5be90abcc3ed8a300bd13878aa214d022"
        },
        {
          "url": "https://git.kernel.org/stable/c/8f5a97443b547b4c83f876f1d6a11df0f1fd4efb"
        },
        {
          "url": "https://git.kernel.org/stable/c/c28409f851abd93b37969cac7498828ad533afd9"
        },
        {
          "url": "https://git.kernel.org/stable/c/1ffdde30a90bf8efe8f270407f486706962b3292"
        },
        {
          "url": "https://git.kernel.org/stable/c/a2b5035ab0e368e8d8a371e27fbc72f133c0bd40"
        },
        {
          "url": "https://git.kernel.org/stable/c/178b8f38932d635e90f5f0e9af1986c6f4a89271"
        }
      ],
      "title": "scsi: bfa: Fix use-after-free in bfad_im_module_exit()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53227",
    "datePublished": "2024-12-27T13:50:16.175Z",
    "dateReserved": "2024-11-19T17:17:25.025Z",
    "dateUpdated": "2026-05-11T20:53:18.703Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-53227",
      "date": "2026-09-16",
      "epss": "0.00275",
      "percentile": "0.20007"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.6.32\", \"versionEndExcluding\": \"4.19.325\", \"matchCriteriaId\": \"560AD6AC-47DD-4D5C-9194-0606623A7EB1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.4.287\", \"matchCriteriaId\": \"E4B15788-D35E-4E5B-A9C0-070AE3729B34\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.231\", \"matchCriteriaId\": \"B5C644CC-2BD7-4E32-BC54-8DCC7ABE9935\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.174\", \"matchCriteriaId\": \"419FD073-1517-4FD5-8158-F94BC68A1E89\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.120\", \"matchCriteriaId\": \"09AC6122-E2A4-40FE-9D33-268A1B2EC265\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.2\", \"versionEndExcluding\": \"6.6.64\", \"matchCriteriaId\": \"CA16DEE3-ABEC-4449-9F4A-7A3DC4FC36C7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.11.11\", \"matchCriteriaId\": \"21434379-192D-472F-9B54-D45E3650E893\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.12\", \"versionEndExcluding\": \"6.12.2\", \"matchCriteriaId\": \"D8882B1B-2ABC-4838-AC1D-DBDBB5764776\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\\n\\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\\n\\nCall Trace:\\n \u003cTASK\u003e\\n dump_stack_lvl+0x95/0xe0\\n print_report+0xcb/0x620\\n kasan_report+0xbd/0xf0\\n __lock_acquire+0x2aca/0x3a20\\n lock_acquire+0x19b/0x520\\n _raw_spin_lock+0x2b/0x40\\n attribute_container_unregister+0x30/0x160\\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\\n bfad_im_module_exit+0x23/0x60 [bfa]\\n bfad_init+0xdb/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n \u003c/TASK\u003e\\n\\nAllocated by task 25303:\\n kasan_save_stack+0x24/0x50\\n kasan_save_track+0x14/0x30\\n __kasan_kmalloc+0x7f/0x90\\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\\n bfad_im_module_init+0x17/0x80 [bfa]\\n bfad_init+0x23/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nFreed by task 25303:\\n kasan_save_stack+0x24/0x50\\n kasan_save_track+0x14/0x30\\n kasan_save_free_info+0x3b/0x60\\n __kasan_slab_free+0x38/0x50\\n kfree+0x212/0x480\\n bfad_im_module_init+0x7e/0x80 [bfa]\\n bfad_init+0x23/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nAbove issue happens as follows:\\n\\nbfad_init\\n  error = bfad_im_module_init()\\n    fc_release_transport(bfad_im_scsi_transport_template);\\n  if (error)\\n    goto ext;\\n\\next:\\n  bfad_im_module_exit();\\n    fc_release_transport(bfad_im_scsi_transport_template);\\n    --\u003e Trigger double release\\n\\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: bfa: Se corrige el use-after-free en bfad_im_module_exit() ERROR: KASAN: use-after-free de losa en __lock_acquire+0x2aca/0x3a20 Lectura de tama\\u00f1o 8 en la direcci\\u00f3n ffff8881082d80c8 por la tarea modprobe/25303 Seguimiento de llamadas:  dump_stack_lvl+0x95/0xe0 print_report+0xcb/0x620 kasan_report+0xbd/0xf0 __lock_acquire+0x2aca/0x3a20 lock_acquire+0x19b/0x520 _raw_spin_lock+0x2b/0x40 attribute_container_unregister+0x30/0x160 Asignado por tarea 25303: pila de guardado de kasan+0x24/0x50 pista de guardado de kasan+0x14/0x30 __kasan_kmalloc+0x7f/0x90 transporte de acoplamiento de fc+0x4f/0x4740 [transporte de scsi_fc] inicio del m\\u00f3dulo de bfad_im+0x17/0x80 [bfa] inicio del m\\u00f3dulo de bfad_init+0x23/0xff0 [bfa] hacer una llamada de inicio+0xdc/0x550 hacer el m\\u00f3dulo de inicio+0x22d/0x6b0 m\\u00f3dulo de carga+0x4e96/0x5ff0 m\\u00f3dulo de inicio desde el archivo+0xcd/0x130 m\\u00f3dulo de inicio idempotente+0x330/0x620 __x64_sys_finit_module+0xb3/0x110 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f Liberado por la tarea 25303: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3b/0x60 __kasan_slab_free+0x38/0x50 kfree+0x212/0x480 bfad_im_module_init+0x7e/0x80 [bfa] bfad_init+0x23/0xff0 [bfa] do_one_initcall+0xdc/0x550 do_init_module+0x22d/0x6b0 load_module+0x4e96/0x5ff0 init_module_from_file+0xcd/0x130 idempotent_init_module+0x330/0x620 __x64_sys_finit_module+0xb3/0x110 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f El problema anterior ocurre de la siguiente manera: bfad_init error = bfad_im_module_init() fc_release_transport(bfad_im_scsi_transport_template); if (error) goto ext; ext: bfad_im_module_exit(); fc_release_transport(bfad_im_scsi_transport_template); --\u0026gt; Disparador de doble liberaci\\u00f3n No llame a bfad_im_module_exit() si bfad_im_module_init() fall\\u00f3.\"}]",
      "id": "CVE-2024-53227",
      "lastModified": "2025-01-10T18:06:07.793",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}]}",
      "published": "2024-12-27T14:15:30.937",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/0ceac8012d3ddea3317f0d82934293d05feb8af1\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/178b8f38932d635e90f5f0e9af1986c6f4a89271\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/1ffdde30a90bf8efe8f270407f486706962b3292\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/3932c753f805a02e9364a4c58b590f21901f8490\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/8f5a97443b547b4c83f876f1d6a11df0f1fd4efb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a2b5035ab0e368e8d8a371e27fbc72f133c0bd40\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c28409f851abd93b37969cac7498828ad533afd9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e76181a5be90abcc3ed8a300bd13878aa214d022\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/ef2c2580189ea88a0dcaf56eb3a565763a900edb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}]"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T02:06:45.000Z",
      "cve": "CVE-2024-53227",
      "id": "msrc_CVE-2024-53227",
      "initial_release_date": "2024-12-02T00:00:00.000Z",
      "product_status:fixed": "4",
      "product_status:known_affected": "4",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "scsi: bfa: Fix use-after-free in bfad_im_module_exit()",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-53227.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-53227\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-12-27T14:15:30.937\",\"lastModified\":\"2026-06-17T08:08:38.740\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\\n\\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\\n\\nCall Trace:\\n \u003cTASK\u003e\\n dump_stack_lvl+0x95/0xe0\\n print_report+0xcb/0x620\\n kasan_report+0xbd/0xf0\\n __lock_acquire+0x2aca/0x3a20\\n lock_acquire+0x19b/0x520\\n _raw_spin_lock+0x2b/0x40\\n attribute_container_unregister+0x30/0x160\\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\\n bfad_im_module_exit+0x23/0x60 [bfa]\\n bfad_init+0xdb/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n \u003c/TASK\u003e\\n\\nAllocated by task 25303:\\n kasan_save_stack+0x24/0x50\\n kasan_save_track+0x14/0x30\\n __kasan_kmalloc+0x7f/0x90\\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\\n bfad_im_module_init+0x17/0x80 [bfa]\\n bfad_init+0x23/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nFreed by task 25303:\\n kasan_save_stack+0x24/0x50\\n kasan_save_track+0x14/0x30\\n kasan_save_free_info+0x3b/0x60\\n __kasan_slab_free+0x38/0x50\\n kfree+0x212/0x480\\n bfad_im_module_init+0x7e/0x80 [bfa]\\n bfad_init+0x23/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nAbove issue happens as follows:\\n\\nbfad_init\\n  error = bfad_im_module_init()\\n    fc_release_transport(bfad_im_scsi_transport_template);\\n  if (error)\\n    goto ext;\\n\\next:\\n  bfad_im_module_exit();\\n    fc_release_transport(bfad_im_scsi_transport_template);\\n    --\u003e Trigger double release\\n\\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: bfa: Se corrige el use-after-free en bfad_im_module_exit() ERROR: KASAN: use-after-free de losa en __lock_acquire+0x2aca/0x3a20 Lectura de tama\u00f1o 8 en la direcci\u00f3n ffff8881082d80c8 por la tarea modprobe/25303 Seguimiento de llamadas:  dump_stack_lvl+0x95/0xe0 print_report+0xcb/0x620 kasan_report+0xbd/0xf0 __lock_acquire+0x2aca/0x3a20 lock_acquire+0x19b/0x520 _raw_spin_lock+0x2b/0x40 attribute_container_unregister+0x30/0x160 Asignado por tarea 25303: pila de guardado de kasan+0x24/0x50 pista de guardado de kasan+0x14/0x30 __kasan_kmalloc+0x7f/0x90 transporte de acoplamiento de fc+0x4f/0x4740 [transporte de scsi_fc] inicio del m\u00f3dulo de bfad_im+0x17/0x80 [bfa] inicio del m\u00f3dulo de bfad_init+0x23/0xff0 [bfa] hacer una llamada de inicio+0xdc/0x550 hacer el m\u00f3dulo de inicio+0x22d/0x6b0 m\u00f3dulo de carga+0x4e96/0x5ff0 m\u00f3dulo de inicio desde el archivo+0xcd/0x130 m\u00f3dulo de inicio idempotente+0x330/0x620 __x64_sys_finit_module+0xb3/0x110 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f Liberado por la tarea 25303: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3b/0x60 __kasan_slab_free+0x38/0x50 kfree+0x212/0x480 bfad_im_module_init+0x7e/0x80 [bfa] bfad_init+0x23/0xff0 [bfa] do_one_initcall+0xdc/0x550 do_init_module+0x22d/0x6b0 load_module+0x4e96/0x5ff0 init_module_from_file+0xcd/0x130 idempotent_init_module+0x330/0x620 __x64_sys_finit_module+0xb3/0x110 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f El problema anterior ocurre de la siguiente manera: bfad_init error = bfad_im_module_init() fc_release_transport(bfad_im_scsi_transport_template); if (error) goto ext; ext: bfad_im_module_exit(); fc_release_transport(bfad_im_scsi_transport_template); --\u0026gt; Disparador de doble liberaci\u00f3n No llame a bfad_im_module_exit() si bfad_im_module_init() fall\u00f3.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/scsi/bfa/bfad.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"0ceac8012d3ddea3317f0d82934293d05feb8af1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"3932c753f805a02e9364a4c58b590f21901f8490\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"ef2c2580189ea88a0dcaf56eb3a565763a900edb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"e76181a5be90abcc3ed8a300bd13878aa214d022\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"8f5a97443b547b4c83f876f1d6a11df0f1fd4efb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"c28409f851abd93b37969cac7498828ad533afd9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"1ffdde30a90bf8efe8f270407f486706962b3292\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"a2b5035ab0e368e8d8a371e27fbc72f133c0bd40\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\",\"lessThan\":\"178b8f38932d635e90f5f0e9af1986c6f4a89271\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/scsi/bfa/bfad.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.32\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.32\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.325\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.287\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.231\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.174\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.120\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.64\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11.11\",\"lessThanOrEqual\":\"6.11.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.2\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-02-11T15:43:06.746226Z\",\"id\":\"CVE-2024-53227\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.32\",\"versionEndExcluding\":\"4.19.325\",\"matchCriteriaId\":\"560AD6AC-47DD-4D5C-9194-0606623A7EB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.287\",\"matchCriteriaId\":\"E4B15788-D35E-4E5B-A9C0-070AE3729B34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.231\",\"matchCriteriaId\":\"B5C644CC-2BD7-4E32-BC54-8DCC7ABE9935\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.174\",\"matchCriteriaId\":\"419FD073-1517-4FD5-8158-F94BC68A1E89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.120\",\"matchCriteriaId\":\"09AC6122-E2A4-40FE-9D33-268A1B2EC265\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.64\",\"matchCriteriaId\":\"CA16DEE3-ABEC-4449-9F4A-7A3DC4FC36C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.11.11\",\"matchCriteriaId\":\"21434379-192D-472F-9B54-D45E3650E893\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12\",\"versionEndExcluding\":\"6.12.2\",\"matchCriteriaId\":\"D8882B1B-2ABC-4838-AC1D-DBDBB5764776\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0ceac8012d3ddea3317f0d82934293d05feb8af1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/178b8f38932d635e90f5f0e9af1986c6f4a89271\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1ffdde30a90bf8efe8f270407f486706962b3292\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3932c753f805a02e9364a4c58b590f21901f8490\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8f5a97443b547b4c83f876f1d6a11df0f1fd4efb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a2b5035ab0e368e8d8a371e27fbc72f133c0bd40\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c28409f851abd93b37969cac7498828ad533afd9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e76181a5be90abcc3ed8a300bd13878aa214d022\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ef2c2580189ea88a0dcaf56eb3a565763a900edb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T13:51:32+00:00",
      "cve": "CVE-2024-53227",
      "id": "CVE-2024-53227",
      "initial_release_date": "2024-12-27T00:00:00+00:00",
      "product_status:known_affected": "42",
      "product_status:known_not_affected": "156",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: scsi: bfa: Fix use-after-free in bfad_im_module_exit()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53227.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T02:07:48Z",
      "cve": "CVE-2024-53227",
      "id": "CVE-2024-53227",
      "initial_release_date": "2024-12-28T03:49:54Z",
      "product_status:known_affected": "739",
      "product_status:known_not_affected": "32",
      "product_status:recommended": "499",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-53227",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-53227.json",
      "version": "78"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T20:47:54.103Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-53227\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-11T15:43:06.746226Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-11T15:43:08.067Z\"}}], \"cna\": {\"title\": \"scsi: bfa: Fix use-after-free in bfad_im_module_exit()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"0ceac8012d3ddea3317f0d82934293d05feb8af1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"3932c753f805a02e9364a4c58b590f21901f8490\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"ef2c2580189ea88a0dcaf56eb3a565763a900edb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"e76181a5be90abcc3ed8a300bd13878aa214d022\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"8f5a97443b547b4c83f876f1d6a11df0f1fd4efb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"c28409f851abd93b37969cac7498828ad533afd9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"1ffdde30a90bf8efe8f270407f486706962b3292\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"a2b5035ab0e368e8d8a371e27fbc72f133c0bd40\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7725ccfda59715ecf8f99e3b520a0b84cc2ea79e\", \"lessThan\": \"178b8f38932d635e90f5f0e9af1986c6f4a89271\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/scsi/bfa/bfad.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.32\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.32\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.325\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.287\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.231\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.174\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.120\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.64\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.12.*\"}, {\"status\": \"unaffected\", \"version\": \"6.13\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/scsi/bfa/bfad.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/0ceac8012d3ddea3317f0d82934293d05feb8af1\"}, {\"url\": \"https://git.kernel.org/stable/c/3932c753f805a02e9364a4c58b590f21901f8490\"}, {\"url\": \"https://git.kernel.org/stable/c/ef2c2580189ea88a0dcaf56eb3a565763a900edb\"}, {\"url\": \"https://git.kernel.org/stable/c/e76181a5be90abcc3ed8a300bd13878aa214d022\"}, {\"url\": \"https://git.kernel.org/stable/c/8f5a97443b547b4c83f876f1d6a11df0f1fd4efb\"}, {\"url\": \"https://git.kernel.org/stable/c/c28409f851abd93b37969cac7498828ad533afd9\"}, {\"url\": \"https://git.kernel.org/stable/c/1ffdde30a90bf8efe8f270407f486706962b3292\"}, {\"url\": \"https://git.kernel.org/stable/c/a2b5035ab0e368e8d8a371e27fbc72f133c0bd40\"}, {\"url\": \"https://git.kernel.org/stable/c/178b8f38932d635e90f5f0e9af1986c6f4a89271\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\\n\\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\\n\\nCall Trace:\\n \u003cTASK\u003e\\n dump_stack_lvl+0x95/0xe0\\n print_report+0xcb/0x620\\n kasan_report+0xbd/0xf0\\n __lock_acquire+0x2aca/0x3a20\\n lock_acquire+0x19b/0x520\\n _raw_spin_lock+0x2b/0x40\\n attribute_container_unregister+0x30/0x160\\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\\n bfad_im_module_exit+0x23/0x60 [bfa]\\n bfad_init+0xdb/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n \u003c/TASK\u003e\\n\\nAllocated by task 25303:\\n kasan_save_stack+0x24/0x50\\n kasan_save_track+0x14/0x30\\n __kasan_kmalloc+0x7f/0x90\\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\\n bfad_im_module_init+0x17/0x80 [bfa]\\n bfad_init+0x23/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nFreed by task 25303:\\n kasan_save_stack+0x24/0x50\\n kasan_save_track+0x14/0x30\\n kasan_save_free_info+0x3b/0x60\\n __kasan_slab_free+0x38/0x50\\n kfree+0x212/0x480\\n bfad_im_module_init+0x7e/0x80 [bfa]\\n bfad_init+0x23/0xff0 [bfa]\\n do_one_initcall+0xdc/0x550\\n do_init_module+0x22d/0x6b0\\n load_module+0x4e96/0x5ff0\\n init_module_from_file+0xcd/0x130\\n idempotent_init_module+0x330/0x620\\n __x64_sys_finit_module+0xb3/0x110\\n do_syscall_64+0xc1/0x1d0\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nAbove issue happens as follows:\\n\\nbfad_init\\n  error = bfad_im_module_init()\\n    fc_release_transport(bfad_im_scsi_transport_template);\\n  if (error)\\n    goto ext;\\n\\next:\\n  bfad_im_module_exit();\\n    fc_release_transport(bfad_im_scsi_transport_template);\\n    --\u003e Trigger double release\\n\\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.325\", \"versionStartIncluding\": \"2.6.32\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.287\", \"versionStartIncluding\": \"2.6.32\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.231\", \"versionStartIncluding\": \"2.6.32\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.174\", \"versionStartIncluding\": \"2.6.32\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.120\", \"versionStartIncluding\": \"2.6.32\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.64\", \"versionStartIncluding\": \"2.6.32\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.11\", \"versionStartIncluding\": \"2.6.32\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12.2\", \"versionStartIncluding\": \"2.6.32\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.13\", \"versionStartIncluding\": \"2.6.32\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:53:18.703Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-53227\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T20:53:18.703Z\", \"dateReserved\": \"2024-11-19T17:17:25.025Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-12-27T13:50:16.175Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.