7.8

CVE-2024-53239: linux Use After Free

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2024-53239DEBIAN-CVE-2024-53239
Published 27-12-2024Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2024-53239 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.1% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.29%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 76 · Related 76
DLA-4075-1DLA-4076-1SUSE-SU-2025:0152-1SUSE-SU-2025:0201-1SUSE-SU-2025:0201-2SUSE-SU-2025:0202-1

Timeline

  1. 27-12-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release the resources right after the call of usb6fire_chip_abort(). But at this moment, the card object might be still in use (as we're calling snd_card_free_when_closed()). For avoid potential UAFs, move the release of resources to the card's private_free instead of the manual call of usb6fire_chip_destroy() at the USB disconnect callback.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.29%

Chance of exploitation in the next 30 days

Percentile

20%

Versus all other CVEs

30-day change

0.00 pp

From 0.29% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.29%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu134 products
  • linuxAll versions (No fix recorded) | < 4.4.0-271.305 | < 4.15.0-240.252 | < 5.4.0-211.231 | < 5.15.0-135.146 | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1146.152 | < 4.4.0-1184.199 | < 4.15.0-1183.196 | < 5.4.0-1142.152 | < 5.15.0-1080.87 | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < 74357d0b5cd3ef544752bc9f21cbeee4902fae6c | ≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < 273eec23467dfbfbd0e4c10302579ba441fb1e13 | ≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < f2d06d4e129e2508e356136f99bb20a332ff1a00 | ≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < b889a7d68d7e76b8795b754a75c91a2d561d5e8c | ≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < ea8cc56db659cf0ae57073e32a4735ead7bd7ee3 | ≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < b754e831a94f82f2593af806741392903f359168 | ≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < 0df7f4b5cc10f5adf98be0845372e9eef7bb5b09 | ≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < 57860a80f03f9dc69a34a5c37b0941ad032a0a8c | ≥ c6d43ba816d1cf1d125bfbfc938f2a28a87facf9, < a0810c3d6dd2d29a9b92604d682eacd2902ce947 | 2.6.39
  • linux_kernel≥ 2.6.39, < 4.19.325 | ≥ 4.20, < 5.4.287 | ≥ 5.5, < 5.10.231 | ≥ 5.11, < 5.15.174 | ≥ 5.16, < 6.1.120 | ≥ 6.2, < 6.6.64 | ≥ 6.7, < 6.11.11 | ≥ 6.12, < 6.12.2
Debian1 product
  • linux< 6.1.123-1 | < 6.12.3-1

3 vendors · 137 products

References

57 links
Show all 57 references