CVE-2024-57798: linux Use After Free
Vulnerability summary
CVE-2024-57798 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 47 · Related 43Timeline
- 11-01-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While receiving an MST up request message from one thread in drm_dp_mst_handle_up_req(), the MST topology could be removed from another thread via drm_dp_mst_topology_mgr_set_mst(false), freeing mst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL. This could lead to a NULL deref/use-after-free of mst_primary in drm_dp_mst_handle_up_req(). Avoid the above by holding a reference for mst_primary in drm_dp_mst_handle_up_req() while it's used. v2: Fix kfreeing the request if getting an mst_primary reference fails.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
0.00 pp
From 0.22% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
- CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.
Affected systems
Ubuntu123 products
- linux< 5.15.0-136.147 | < 6.8.0-57.59
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1081.88 | < 6.8.0-1026.28
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 9408cc94eb041d0c2f9f00189a613b94c0449450, < f61b2e5e7821f868d6afc22382a66a30ee780ba0 | ≥ 9408cc94eb041d0c2f9f00189a613b94c0449450, < 9735d40f5fde9970aa46e828ecc85c32571d58a2 | ≥ 9408cc94eb041d0c2f9f00189a613b94c0449450, < ce55818b2d3a999f886af91679589e4644ff1dc8 | ≥ 9408cc94eb041d0c2f9f00189a613b94c0449450, < e54b00086f7473dbda1a7d6fc47720ced157c6a8 | 5.5
- linux_kernel< 6.1.123 | ≥ 6.2, < 6.6.69 | ≥ 6.7, < 6.12.8 | 6.13:rc1
Debian1 product
- linux< 6.1.123-1 | < 6.12.8-1
3 vendors · 126 products
