Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9qvz-mrkc-7kbj
Vulnerability ID VCID-9qvz-mrkc-7kbj
Aliases CVE-2024-43850
Summary In the Linux kernel, the following vulnerability has been resolved: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove The following warning is seen during bwmon_remove due to refcount imbalance, fix this by releasing the OPPs after use. Logs: WARNING: at drivers/opp/core.c:1640 _opp_table_kref_release+0x150/0x158 Hardware name: Qualcomm Technologies, Inc. X1E80100 CRD (DT) ... Call trace: _opp_table_kref_release+0x150/0x158 dev_pm_opp_remove_table+0x100/0x1b4 devm_pm_opp_of_table_release+0x10/0x1c devm_action_release+0x14/0x20 devres_release_all+0xa4/0x104 device_unbind_cleanup+0x18/0x60 device_release_driver_internal+0x1ec/0x228 driver_detach+0x50/0x98 bus_remove_driver+0x6c/0xbc driver_unregister+0x30/0x60 platform_driver_unregister+0x14/0x20 bwmon_driver_exit+0x18/0x524 [icc_bwmon] __arm64_sys_delete_module+0x184/0x264 invoke_syscall+0x48/0x118 el0_svc_common.constprop.0+0xc8/0xe8 do_el0_svc+0x20/0x2c el0_svc+0x34/0xdc el0t_64_sync_handler+0x13c/0x158 el0t_64_sync+0x190/0x194 --[ end trace 0000000000000000 ]---
Status Published
Exploitability 0.5
Weighted Severity 5.0
Risk 2.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-911 Improper Update of Reference Count
System Score Found at
cvssv3 5.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-43850.json
epss 0.00033 https://api.first.org/data/v1/epss?cve=CVE-2024-43850
epss 0.00033 https://api.first.org/data/v1/epss?cve=CVE-2024-43850
epss 0.00033 https://api.first.org/data/v1/epss?cve=CVE-2024-43850
cvssv3.1 5.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
ssvc Track https://git.kernel.org/stable/c/24086640ab39396eb1a92d1cb1cd2f31b2677c52
ssvc Track https://git.kernel.org/stable/c/4100d4d019f8e140be1d4d3a9d8d93c1285f5d1c
ssvc Track https://git.kernel.org/stable/c/aad41f4c169bcb800ae88123799bdf8cdec3d366
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-43850.json
https://api.first.org/data/v1/epss?cve=CVE-2024-43850
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2305508 https://bugzilla.redhat.com/show_bug.cgi?id=2305508
24086640ab39396eb1a92d1cb1cd2f31b2677c52 https://git.kernel.org/stable/c/24086640ab39396eb1a92d1cb1cd2f31b2677c52
4100d4d019f8e140be1d4d3a9d8d93c1285f5d1c https://git.kernel.org/stable/c/4100d4d019f8e140be1d4d3a9d8d93c1285f5d1c
aad41f4c169bcb800ae88123799bdf8cdec3d366 https://git.kernel.org/stable/c/aad41f4c169bcb800ae88123799bdf8cdec3d366
USN-7154-1 https://usn.ubuntu.com/7154-1/
USN-7154-2 https://usn.ubuntu.com/7154-2/
USN-7155-1 https://usn.ubuntu.com/7155-1/
USN-7156-1 https://usn.ubuntu.com/7156-1/
USN-7196-1 https://usn.ubuntu.com/7196-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-43850.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-10T16:07:27Z/ Found at https://git.kernel.org/stable/c/24086640ab39396eb1a92d1cb1cd2f31b2677c52
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-10T16:07:27Z/ Found at https://git.kernel.org/stable/c/4100d4d019f8e140be1d4d3a9d8d93c1285f5d1c
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-10T16:07:27Z/ Found at https://git.kernel.org/stable/c/aad41f4c169bcb800ae88123799bdf8cdec3d366
Exploit Prediction Scoring System (EPSS)
Percentile 0.10084
EPSS Score 0.00033
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:51:20.330687+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0