CVE-2024-53194
HIGH 7.8 ALL-YEARSIn the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot->bus on hot remove Dennis reports a boot crash on recent Lenovo laptops with a USB4 dock. Since commit 0fc70886569c ("thunderbolt: Reset USB4 v2 host router") and commit 59a54c5f3dbd ("thunderbolt: Reset topology created by the boot firmware"), USB4 v2 and v1 Host Routers are reset on probe of the thunderbolt driver. The reset clears the Presence Detect State and Data Link Layer Link Active bits at the USB4 Host Router's Root Port and thus causes hot removal of the dock. The crash occurs when pciehp is unbound from one of the dock's Downstream Ports: pciehp creates a pci_slot on bind and destroys it on unbind. The pci_slot contains a pointer to the pci_bus below the Downstream Port, but a reference on that pci_bus is never acquired. The pci_bus is destroyed before the pci_slot, so a use-after-free ensues when pci_slot_release() accesses slot->bus. In principle this should not happen because pci_stop_bus_device() unbinds pciehp (and therefore destroys the pci_slot) before the pci_bus is destroyed by pci_remove_bus_device(). However the stacktrace provided by Dennis shows that pciehp is unbound from pci_remove_bus_device() instead of pci_stop_bus_device(). To understand the significance of this, one needs to know that the PCI core uses a two step process to remove a portion of the hierarchy: It first unbinds all drivers in the sub-hierarchy in pci_stop_bus_device() an
ELEVATED IMPACT
Severe if exploited (CVSS 7.8), but no confirmed exploitation. Patch on a normal cadence.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 15th percentile
○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no
Impact if exploited
7.8CVSS 3.1 · HIGH · ADP
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityHigh
What an attacker needs
- ⚠Access: Requires local access to the host
- ⚠Privileges: Requires a low-privilege account
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Weakness (CWE)
- CWE-416: Use After Free
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References and research data (JSON)
Vendor product assessments
Showing 32 of 417 vendor product statements; 385 omitted. Read the full vendor advisory.
kernel-64k-debug-debuginfo-0:5.14.0-570.12.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-debuginfo-0:5.14.0-570.12.1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-tools-debuginfo-0:5.14.0-570.12.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
python3-perf-0:5.14.0-570.12.1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-64k-0:5.14.0-570.12.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-debug-0:5.14.0-570.12.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-debug-uki-virt-0:5.14.0-570.12.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-modules-extra-0:5.14.0-570.12.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-zfcpdump-0:5.14.0-570.12.1.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-debug-debuginfo-0:5.14.0-570.12.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-tools-debuginfo-0:5.14.0-570.12.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
python3-perf-debuginfo-0:5.14.0-570.12.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-tools-debuginfo-0:5.14.0-570.12.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-rt-64k-debug-modules-0:5.14.0-570.12.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-rt-debug-modules-core-0:5.14.0-570.12.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
python3-perf-debuginfo-0:5.14.0-570.12.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-firmware as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-firmware
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-headers as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-headers
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-rt-doc as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-doc
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-tools-libs as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-tools-libs
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-abi-stablelists as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-abi-stablelists
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-debug-modules-extra as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug-modules-extra
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-modules-extra as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-modules-extra
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-modules
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-modules-internal
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-zfcpdump as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-zfcpdump
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
python3-perf as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/python3-perf
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-kvm
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
kernel-rt-kvm as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-kvm
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
kernel-rt.src as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Linux | Linux Kernel | < 4.19.325 |
| Linux | Linux Kernel | ≥ 4.20 and < 5.4.287 |
| Linux | Linux Kernel | ≥ 5.5 and < 5.10.231 |
| Linux | Linux Kernel | ≥ 5.11 and < 5.15.174 |
| Linux | Linux Kernel | ≥ 5.16 and < 6.1.120 |
| Linux | Linux Kernel | ≥ 6.2 and < 6.6.64 |
| Linux | Linux Kernel | ≥ 6.7 and < 6.11.11 |
| Linux | Linux Kernel | ≥ 6.12 and < 6.12.2 |
All CVSS metrics
- HIGH 7.8 v3.1 · ADP Primary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - HIGH 7.8 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Patches & mitigations
- https://git.kernel.org/stable/c/50473dd3b2a08601a078f852ea05572de9b1f86c CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://git.kernel.org/stable/c/d0ddd2c92b75a19a37c887154223372b600fed37 CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://git.kernel.org/stable/c/da6e6ff1f6c57f16e07af955e0e997fc90dd1e75 CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://git.kernel.org/stable/c/41bbb1eb996be1435815aa1fbcc9ffc45b84cc12 CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://git.kernel.org/stable/c/20502f0b3f3acd6bee300257556c27a867f80c8b CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://git.kernel.org/stable/c/e5d5c04aac71bf1476dc44b56f2206a4c2facca8 CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://git.kernel.org/stable/c/c8266ab8e7ccd1d1f5a9c8b29eb2020175048134 CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://git.kernel.org/stable/c/69d2ceac11acf8579d58d55c9c5b65fb658f916e CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://git.kernel.org/stable/c/c7acef99642b763ba585f4a43af999fcdbcc3dc4 CVE record · Linux · Updated 2026-05-11T20:52:39.806Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487
Advisories
- https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53194.json Red Hat · CVE-2024-53194 · Updated 2026-09-28T09:06:08+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-51866 EUVD · EUVD-2024-51866
Technical & other
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.htmlCVE record · CVE · Updated 2025-11-03T20:47:25.631Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://lists.debian.org/debian-lts-announce/2025/03/msg00002.htmlCVE record · CVE · Updated 2025-11-03T20:47:25.631Z
NVD · CVE-2024-53194 · Updated 2026-06-17T08:08:33.487 - https://access.redhat.com/security/cve/CVE-2024-53194 Red Hat · CVE-2024-53194 · Updated 2026-09-28T09:06:08+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2334367 Red Hat · CVE-2024-53194 · Updated 2026-09-28T09:06:08+00:00
- https://www.cve.org/CVERecord?id=CVE-2024-53194 Red Hat · CVE-2024-53194 · Updated 2026-09-28T09:06:08+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2024-53194 Red Hat · CVE-2024-53194 · Updated 2026-09-28T09:06:08+00:00
- https://lore.kernel.org/linux-cve-announce/2024122724-CVE-2024-53194-9edf@gregkh/T Red Hat · CVE-2024-53194 · Updated 2026-09-28T09:06:08+00:00
- https://access.redhat.com/errata/RHSA-2025:6966 Red Hat · CVE-2024-53194 · Updated 2026-09-28T09:06:08+00:00
Sources: NVD · CVE.org · All sources and attribution · EPSS