CVE-2024-43830 (GCVE-0-2024-43830)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:21 – Updated: 2026-08-05 11:36
VLAI
Title
leds: trigger: Unregister sysfs attributes before calling deactivate()
Summary
In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate() callback and freed by the deactivate() callback. Calling device_remove_groups() after calling deactivate() leaves a window where the sysfs attributes show/store functions could be called after deactivation and then operate on the just freed trigger-data. Move the device_remove_groups() call to before deactivate() to close this race window. This also makes the deactivation path properly do things in reverse order of the activation path which calls the activate() callback before calling device_add_groups().
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 , < c3b7a650c8717aa89df318364609c86cbc040156 (git)
Affected: a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 , < d1415125b701ef13370e2761f691ec632a5eb93a (git)
Affected: a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 , < 09c1583f0e10c918855d6e7540a79461a353e5d6 (git)
Affected: a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 , < 3fb6a9d67cfd812a547ac73ec02e1077c26c640d (git)
Affected: a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 , < 734ba6437e80dfc780e9ee9d95f912392d12b5ea (git)
Affected: a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 , < cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374 (git)
Affected: a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 , < 0788a6f3523d3686a9eed5ea1e6fcce6841277b2 (git)
Affected: a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 , < c0dc9adf9474ecb7106e60e5472577375aedaed3 (git)
Create a notification for this product.
Linux Linux Affected: 4.19
Unaffected: 0 , < 4.19 (semver)
Unaffected: 4.19.320 , ≤ 4.19.* (semver)
Unaffected: 5.4.282 , ≤ 5.4.* (semver)
Unaffected: 5.10.224 , ≤ 5.10.* (semver)
Unaffected: 5.15.165 , ≤ 5.15.* (semver)
Unaffected: 6.1.103 , ≤ 6.1.* (semver)
Unaffected: 6.6.44 , ≤ 6.6.* (semver)
Unaffected: 6.10.3 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem Affected: 0 , < * (custom)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-43830",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:08:31.513833Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:23.792Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:05:15.405Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T11:56:56.293Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/leds/led-triggers.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c3b7a650c8717aa89df318364609c86cbc040156",
              "status": "affected",
              "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
              "versionType": "git"
            },
            {
              "lessThan": "d1415125b701ef13370e2761f691ec632a5eb93a",
              "status": "affected",
              "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
              "versionType": "git"
            },
            {
              "lessThan": "09c1583f0e10c918855d6e7540a79461a353e5d6",
              "status": "affected",
              "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
              "versionType": "git"
            },
            {
              "lessThan": "3fb6a9d67cfd812a547ac73ec02e1077c26c640d",
              "status": "affected",
              "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
              "versionType": "git"
            },
            {
              "lessThan": "734ba6437e80dfc780e9ee9d95f912392d12b5ea",
              "status": "affected",
              "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
              "versionType": "git"
            },
            {
              "lessThan": "cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374",
              "status": "affected",
              "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
              "versionType": "git"
            },
            {
              "lessThan": "0788a6f3523d3686a9eed5ea1e6fcce6841277b2",
              "status": "affected",
              "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
              "versionType": "git"
            },
            {
              "lessThan": "c0dc9adf9474ecb7106e60e5472577375aedaed3",
              "status": "affected",
              "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/leds/led-triggers.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.19"
            },
            {
              "lessThan": "4.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.320",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.320",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: trigger: Unregister sysfs attributes before calling deactivate()\n\nTriggers which have trigger specific sysfs attributes typically store\nrelated data in trigger-data allocated by the activate() callback and\nfreed by the deactivate() callback.\n\nCalling device_remove_groups() after calling deactivate() leaves a window\nwhere the sysfs attributes show/store functions could be called after\ndeactivation and then operate on the just freed trigger-data.\n\nMove the device_remove_groups() call to before deactivate() to close\nthis race window.\n\nThis also makes the deactivation path properly do things in reverse order\nof the activation path which calls the activate() callback before calling\ndevice_add_groups()."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached only through local interfaces \u2014 sysfs writes/reads under /sys/class/leds/\u003cled\u003e/ and the v4l2 subdev/flash device nodes that call led_trigger_remove(). No network, adjacent-network, or physical-attach path reaches led_trigger_set().\nAC:L - The attacker drives both sides of the race from two of their own threads, and the window is not instruction-tight: ttyname_store()/ttyname_show() sleep for up to hundreds of milliseconds inside wait_for_completion_timeout() on the trigger data while the concurrent trigger change calls deactivate() and frees it, with no lock or kernfs drain in between. Attempts are unlimited and free, so the UAF can be hit reliably.\nPR:L - The racing sysfs attribute show/store callbacks that touch the freed trigger data are world-readable (0644), and the deactivation side is reachable by an unprivileged local user through v4l2_flash_open()/privacy-LED handling on a camera subdev node, or on Android/embedded systems where /sys/class/leds/*/trigger is chowned to a non-root service UID. No real root in the init namespace is required.\nUI:N - The attacker performs both the trigger change and the concurrent attribute access from their own threads; no victim action or interaction is needed.\nS:U - The use-after-free corrupts kernel slab memory within the same kernel security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - The show callbacks read the freed trigger_data \u2014 e.g. ttyname_show() sprintf()s a dangling char * to a user buffer and netdev\u0027s device_name_show()/interval_show() copy out freed-slab contents \u2014 giving a groomable kernel heap information leak.\nI:H - Store callbacks write into the freed object (reinit_completion(), trigger_data-\u003ettyname = ..., atomic_set of interval, mode bit sets) and then act on attacker-groomable pointers via kfree(trigger_data-\u003ettyname), tty_kref_put(trigger_data-\u003etty), and schedule_delayed_work() on a freed delayed_work \u2014 arbitrary free, refcount decrement, and work-function-pointer control suitable for privilege escalation.\nA:H - Operating on freed trigger data corrupts the slab, the workqueue/timer lists, and the completion wait queue, reliably producing a kernel oops or panic that the attacker can trigger repeatedly."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:36:40.589Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c3b7a650c8717aa89df318364609c86cbc040156"
        },
        {
          "url": "https://git.kernel.org/stable/c/d1415125b701ef13370e2761f691ec632a5eb93a"
        },
        {
          "url": "https://git.kernel.org/stable/c/09c1583f0e10c918855d6e7540a79461a353e5d6"
        },
        {
          "url": "https://git.kernel.org/stable/c/3fb6a9d67cfd812a547ac73ec02e1077c26c640d"
        },
        {
          "url": "https://git.kernel.org/stable/c/734ba6437e80dfc780e9ee9d95f912392d12b5ea"
        },
        {
          "url": "https://git.kernel.org/stable/c/cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374"
        },
        {
          "url": "https://git.kernel.org/stable/c/0788a6f3523d3686a9eed5ea1e6fcce6841277b2"
        },
        {
          "url": "https://git.kernel.org/stable/c/c0dc9adf9474ecb7106e60e5472577375aedaed3"
        }
      ],
      "title": "leds: trigger: Unregister sysfs attributes before calling deactivate()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-43830",
    "datePublished": "2024-08-17T09:21:48.946Z",
    "dateReserved": "2024-08-17T09:11:59.273Z",
    "dateUpdated": "2026-08-05T11:36:40.589Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-43830",
      "date": "2026-08-06",
      "epss": "0.00249",
      "percentile": "0.16215"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-43830\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-08-17T10:15:08.857\",\"lastModified\":\"2026-06-17T07:51:47.723\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nleds: trigger: Unregister sysfs attributes before calling deactivate()\\n\\nTriggers which have trigger specific sysfs attributes typically store\\nrelated data in trigger-data allocated by the activate() callback and\\nfreed by the deactivate() callback.\\n\\nCalling device_remove_groups() after calling deactivate() leaves a window\\nwhere the sysfs attributes show/store functions could be called after\\ndeactivation and then operate on the just freed trigger-data.\\n\\nMove the device_remove_groups() call to before deactivate() to close\\nthis race window.\\n\\nThis also makes the deactivation path properly do things in reverse order\\nof the activation path which calls the activate() callback before calling\\ndevice_add_groups().\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: leds: trigger: Anular el registro de los atributos sysfs antes de llamar a desactivar() Los activadores que tienen atributos sysfs espec\u00edficos del activador normalmente almacenan datos relacionados en datos de activaci\u00f3n asignados por la devoluci\u00f3n de llamada enable() y liberados por el desactivar() devoluci\u00f3n de llamada. Llamar a device_remove_groups() despu\u00e9s de llamar a deactivate() deja una ventana donde los atributos sysfs muestran/almacenan funciones que se pueden llamar despu\u00e9s de la desactivaci\u00f3n y luego operar con los datos de activaci\u00f3n reci\u00e9n liberados. Mueva la llamada device_remove_groups() antes de desactivar() para cerrar esta ventana de ejecuci\u00f3n. Esto tambi\u00e9n hace que la ruta de desactivaci\u00f3n haga las cosas correctamente en orden inverso a la ruta de activaci\u00f3n que llama a la devoluci\u00f3n de llamada enable() antes de llamar a device_add_groups().\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/leds/led-triggers.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\",\"lessThan\":\"c3b7a650c8717aa89df318364609c86cbc040156\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\",\"lessThan\":\"d1415125b701ef13370e2761f691ec632a5eb93a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\",\"lessThan\":\"09c1583f0e10c918855d6e7540a79461a353e5d6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\",\"lessThan\":\"3fb6a9d67cfd812a547ac73ec02e1077c26c640d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\",\"lessThan\":\"734ba6437e80dfc780e9ee9d95f912392d12b5ea\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\",\"lessThan\":\"cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\",\"lessThan\":\"0788a6f3523d3686a9eed5ea1e6fcce6841277b2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\",\"lessThan\":\"c0dc9adf9474ecb7106e60e5472577375aedaed3\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/leds/led-triggers.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.19\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.19\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.320\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.282\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.224\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.165\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.103\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.44\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.3\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T16:08:31.513833Z\",\"id\":\"CVE-2024-43830\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19\",\"versionEndExcluding\":\"4.19.320\",\"matchCriteriaId\":\"E8BAB0DE-BD14-4697-AE2B-C241BA82016C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.282\",\"matchCriteriaId\":\"A8961D98-9ACF-4188-BA88-44038B14BC28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.224\",\"matchCriteriaId\":\"5CCEDF13-293D-4E64-B501-4409D0365AFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.165\",\"matchCriteriaId\":\"B4E2B568-3171-41DE-B519-F2B1A3600D94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.103\",\"matchCriteriaId\":\"E45EAC72-8329-4F99-8276-86AF9BB3496A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.44\",\"matchCriteriaId\":\"CC912330-6B41-4C6B-99AF-F3857FBACB6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.3\",\"matchCriteriaId\":\"92D388F2-1EAF-4CFA-AC06-5B26D762EA7D\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0788a6f3523d3686a9eed5ea1e6fcce6841277b2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/09c1583f0e10c918855d6e7540a79461a353e5d6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3fb6a9d67cfd812a547ac73ec02e1077c26c640d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/734ba6437e80dfc780e9ee9d95f912392d12b5ea\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c0dc9adf9474ecb7106e60e5472577375aedaed3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c3b7a650c8717aa89df318364609c86cbc040156\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d1415125b701ef13370e2761f691ec632a5eb93a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-265688.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T18:18:42+00:00",
      "cve": "CVE-2024-43830",
      "id": "CVE-2024-43830",
      "initial_release_date": "2024-08-17T00:00:00+00:00",
      "product_status:fixed": "679",
      "product_status:known_affected": "80",
      "product_status:known_not_affected": "8",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: leds: trigger: Unregister sysfs attributes before calling deactivate()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-43830.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:05:15.405Z\"}}, {\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-265688.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-05-12T11:56:56.293Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-43830\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:08:31.513833Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:23.154Z\"}}], \"cna\": {\"title\": \"leds: trigger: Unregister sysfs attributes before calling deactivate()\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\"}}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\", \"lessThan\": \"c3b7a650c8717aa89df318364609c86cbc040156\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\", \"lessThan\": \"d1415125b701ef13370e2761f691ec632a5eb93a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\", \"lessThan\": \"09c1583f0e10c918855d6e7540a79461a353e5d6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\", \"lessThan\": \"3fb6a9d67cfd812a547ac73ec02e1077c26c640d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\", \"lessThan\": \"734ba6437e80dfc780e9ee9d95f912392d12b5ea\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\", \"lessThan\": \"cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\", \"lessThan\": \"0788a6f3523d3686a9eed5ea1e6fcce6841277b2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a7e7a3156300a7e1982b03cc9cb8fb0c86434c49\", \"lessThan\": \"c0dc9adf9474ecb7106e60e5472577375aedaed3\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/leds/led-triggers.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.19\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.19\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.320\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.282\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.224\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.165\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.103\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.44\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/leds/led-triggers.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/c3b7a650c8717aa89df318364609c86cbc040156\"}, {\"url\": \"https://git.kernel.org/stable/c/d1415125b701ef13370e2761f691ec632a5eb93a\"}, {\"url\": \"https://git.kernel.org/stable/c/09c1583f0e10c918855d6e7540a79461a353e5d6\"}, {\"url\": \"https://git.kernel.org/stable/c/3fb6a9d67cfd812a547ac73ec02e1077c26c640d\"}, {\"url\": \"https://git.kernel.org/stable/c/734ba6437e80dfc780e9ee9d95f912392d12b5ea\"}, {\"url\": \"https://git.kernel.org/stable/c/cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374\"}, {\"url\": \"https://git.kernel.org/stable/c/0788a6f3523d3686a9eed5ea1e6fcce6841277b2\"}, {\"url\": \"https://git.kernel.org/stable/c/c0dc9adf9474ecb7106e60e5472577375aedaed3\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nleds: trigger: Unregister sysfs attributes before calling deactivate()\\n\\nTriggers which have trigger specific sysfs attributes typically store\\nrelated data in trigger-data allocated by the activate() callback and\\nfreed by the deactivate() callback.\\n\\nCalling device_remove_groups() after calling deactivate() leaves a window\\nwhere the sysfs attributes show/store functions could be called after\\ndeactivation and then operate on the just freed trigger-data.\\n\\nMove the device_remove_groups() call to before deactivate() to close\\nthis race window.\\n\\nThis also makes the deactivation path properly do things in reverse order\\nof the activation path which calls the activate() callback before calling\\ndevice_add_groups().\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.320\", \"versionStartIncluding\": \"4.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.282\", \"versionStartIncluding\": \"4.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.224\", \"versionStartIncluding\": \"4.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.165\", \"versionStartIncluding\": \"4.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.103\", \"versionStartIncluding\": \"4.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.44\", \"versionStartIncluding\": \"4.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.3\", \"versionStartIncluding\": \"4.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"4.19\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-04T09:29:48.178Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-43830\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-04T09:29:48.178Z\", \"dateReserved\": \"2024-08-17T09:11:59.273Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-08-17T09:21:48.946Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.