VULNERABILITY INTELLIGENCE

CVE-2024-49860

CVSS score7.3 HIGH

EPSS probability0.25%

CISA KEVNot currently listed

Published2024-10-21

Last modified2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.