CVE-2024-57984 i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
A race condition in the Linux kernel i3c driver allows a use-after-free, potentially enabling local attackers to execute code or escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-57984?
CVE-2024-57984 is a high-severity use after free vulnerability in Linux kernel, published on 27 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
In dw_i3c_common_probe, &master->hj_work is bound with dw_i3c_hj_work. And dw_i3c_master_irq_handler can call dw_i3c_master_irq_handle_ibis function to start the work.
If we remove the module which will call dw_i3c_common_remove to make cleanup, it will free master->base through i3c_master_unregister while the work mentioned above will be used. The sequence of operations that may lead to a UAF bug is as follows:
CPU0 CPU1
| dw_i3c_hj_work dw_i3c_common_remove | i3c_master_unregister(&master->base) | device_unregister(&master->dev) | device_release | //free master->base | | i3c_master_do_daa(&master->base) | //use master->base
Fix it by ensuring that the work is canceled before proceeding with the cleanup in dw_i3c_common_remove.
Weakness: CWE-416
Which versions are affected by CVE-2024-57984?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-57984?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2024-57984 being exploited?
There is no known exploitation of CVE-2024-57984 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-58977, BELL-CVE-2024-57984, DEBIAN-CVE-2024-57984, GHSA-wqcr-wj43-4gg7, ROOT-OS-DEBIAN-11-CVE-2024-57984, ROOT-OS-DEBIAN-12-CVE-2024-57984 and 2 more.