Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2024-43830leds: trigger: Unregister sysfs attributes before calling deactivate()

Description

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate() callback and freed by the deactivate() callback. Calling device_remove_groups() after calling deactivate() leaves a window where the sysfs attributes show/store functions could be called after deactivation and then operate on the just freed trigger-data. Move the device_remove_groups() call to before deactivate() to close this race window. This also makes the deactivation path properly do things in reverse order of the activation path which calls the activate() callback before calling device_add_groups().

Timeline

  1. ID reserved

    By Linux

  2. Published

  3. · 2 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2024-43830, by who scored it
Scored byCVSSScoreVector
LinuxCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.25% · top 83% of all CVEs (14 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Affected products

  • Linux · Linux

    • affected a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 – < c3b7a650c8717aa89df318364609c86cbc040156
    • affected a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 – < d1415125b701ef13370e2761f691ec632a5eb93a
    • affected a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 – < 09c1583f0e10c918855d6e7540a79461a353e5d6
    • affected a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 – < 3fb6a9d67cfd812a547ac73ec02e1077c26c640d
    • affected a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 – < 734ba6437e80dfc780e9ee9d95f912392d12b5ea
    • affected a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 – < cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374
    • affected a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 – < 0788a6f3523d3686a9eed5ea1e6fcce6841277b2
    • affected a7e7a3156300a7e1982b03cc9cb8fb0c86434c49 – < c0dc9adf9474ecb7106e60e5472577375aedaed3

  • Linux · Linux

    • affected 4.19
    • unaffected < 4.19
    • unaffected 4.19.320 – ≤ 4.19.*
    • unaffected 5.4.282 – ≤ 5.4.*
    • unaffected 5.10.224 – ≤ 5.10.*
    • unaffected 5.15.165 – ≤ 5.15.*
    • unaffected 6.1.103 – ≤ 6.1.*
    • unaffected 6.6.44 – ≤ 6.6.*
    • unaffected 6.10.3 – ≤ 6.10.*
    • unaffected 6.11 – ≤ *

References

References11

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-43830 badge
[![CVE-2024-43830](https://cveledger.app/badge/CVE-2024-43830.svg)](https://cveledger.app/cve/CVE-2024-43830)

Record last updated .