CVE-2024-27054
IBM zSeries DASD Kernel Double Decrement Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix double module refcount decrement Once the discipline is associated with the device, deleting the device takes care of decrementing the module's refcount. Doing it manually on this error path causes refcount to artificially decrease on each error while it should just stay the same.
INFO
Published Date :
May 1, 2024, 1:15 p.m.
Last Modified :
May 2, 2025, 7:15 a.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-27054.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-27054 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-27054 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 02, 2025
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/9fe0562179d8fa960afca0eaed6d4ba4122a3cc6 -
Initial Analysis by [email protected]
Apr. 08, 2025
Action Type Old Value New Value Added CWE NVD-CWE-Other Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.7.11 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.23 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.83 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.8 up to (excluding) 6.8.2 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.9 up to (excluding) 5.15.153 Added Reference Type CVE: https://git.kernel.org/stable/c/ad999aa18103fa038787b6a8a55020abcf34df1a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ad999aa18103fa038787b6a8a55020abcf34df1a Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/c3116e62ddeff79cae342147753ce596f01fcf06 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c3116e62ddeff79cae342147753ce596f01fcf06 Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/ebc5a3bd79e54f98c885c26f0862a27a02c487c5 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ebc5a3bd79e54f98c885c26f0862a27a02c487c5 Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/ec09bcab32fc4765e0cc97e1b72cdd067135f37e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ec09bcab32fc4765e0cc97e1b72cdd067135f37e Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/edbdb0d94143db46edd373cc93e433832d29fe19 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/edbdb0d94143db46edd373cc93e433832d29fe19 Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/fa18aa507ea71d8914b6acb2c94db311c757c650 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/fa18aa507ea71d8914b6acb2c94db311c757c650 Types: Patch -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/ad999aa18103fa038787b6a8a55020abcf34df1a Added Reference https://git.kernel.org/stable/c/c3116e62ddeff79cae342147753ce596f01fcf06 Added Reference https://git.kernel.org/stable/c/ebc5a3bd79e54f98c885c26f0862a27a02c487c5 Added Reference https://git.kernel.org/stable/c/ec09bcab32fc4765e0cc97e1b72cdd067135f37e Added Reference https://git.kernel.org/stable/c/edbdb0d94143db46edd373cc93e433832d29fe19 Added Reference https://git.kernel.org/stable/c/fa18aa507ea71d8914b6acb2c94db311c757c650 -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Nov. 06, 2024
Action Type Old Value New Value Added CVSS V3.1 CISA-ADP AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 29, 2024
Action Type Old Value New Value -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 14, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 01, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix double module refcount decrement Once the discipline is associated with the device, deleting the device takes care of decrementing the module's refcount. Doing it manually on this error path causes refcount to artificially decrease on each error while it should just stay the same. Added Reference kernel.org https://git.kernel.org/stable/c/edbdb0d94143db46edd373cc93e433832d29fe19 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ad999aa18103fa038787b6a8a55020abcf34df1a [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ec09bcab32fc4765e0cc97e1b72cdd067135f37e [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/fa18aa507ea71d8914b6acb2c94db311c757c650 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ebc5a3bd79e54f98c885c26f0862a27a02c487c5 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c3116e62ddeff79cae342147753ce596f01fcf06 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-27054 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-27054
weaknesses.