Low severity3.3OSV Advisory· Published Jan 3, 2024· Updated Jun 17, 2026

CVE-2024-0217

Description

A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

107

Hughsie/PackagekitOSV
Range: PACKAGEKIT_0_1_0, PACKAGEKIT_0_1_1, PACKAGEKIT_0_1_2, …
osv-coords102 versions
pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP2 pkg:rpm/suse/libyui&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/libyui-qt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui-rest-api&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/PackageKit-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/libyui&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/libyui-qt-rest-api&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/PackageKit-branding-SLE&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP5 pkg:rpm/opensuse/PackageKit&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP2 pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP2 pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP2 pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP3 pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP3 pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP3 pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP3 pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/PackageKit-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/PackageKit-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/libyui-rest-api&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/PackageKit-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui-ncurses&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui-ncurses-rest-api&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui-qt-graph&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui-qt-rest-api&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libyui-rest-api&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/libyui&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui-ncurses&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui-ncurses-rest-api&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui-qt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui-qt-graph&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui-qt-rest-api&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libyui-rest-api&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/PackageKit-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/libyui-rest-api&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/PackageKit-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libyui&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libyui-ncurses&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libyui-ncurses-pkg&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libyui-ncurses-rest-api&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libyui-qt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libyui-qt-graph&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libyui-rest-api&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/PackageKit&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui-ncurses&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui-ncurses-rest-api&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui-qt-graph&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui-qt-pkg&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui-qt-rest-api&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui-rest-api&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libzypp&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/zypper&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libyui-qt&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/PackageKit&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5
< 2.50.8-150200.3.5.5+ 101 more
- (no CPE)range: < 2.50.8-150200.3.5.5
- (no CPE)range: < 3.9.3-150200.3.2.6
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 0.3.0-150200.3.2.2
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 4.2.17-150200.3.24.6
- (no CPE)range: < 12.0-150200.9.2.2
- (no CPE)range: < 1.1.13-150200.4.30.4
- (no CPE)range: < 3.9.3-150200.3.2.6
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 12.0-150200.9.2.2
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.19
- (no CPE)range: < 4.3.13-150300.3.8.21
- (no CPE)range: < 1.2.4-150400.3.13.1
- (no CPE)range: < 1.2.4-150400.3.13.1
- (no CPE)range: < 2.47.5-150200.3.4.4
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 4.2.17-150200.3.24.6
- (no CPE)range: < 4.1.5-150300.3.10.19
- (no CPE)range: < 4.1.5-150300.3.10.17
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 4.3.13-150300.3.8.21
- (no CPE)range: < 1.1.13-150200.4.30.4
- (no CPE)range: < 12.0-150200.9.2.2
- (no CPE)range: < 4.3.13-150300.3.8.21
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 1.1.13-150200.4.30.4
- (no CPE)range: < 12.0-150200.9.2.2
- (no CPE)range: < 2.50.8-150200.3.5.5
- (no CPE)range: < 2.47.5-150200.3.4.4
- (no CPE)range: < 0.3.0-150200.3.2.2
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 4.2.17-150200.3.24.6
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 1.1.13-150200.4.30.4
- (no CPE)range: < 12.0-150200.9.2.2
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.19
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.17
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 3.9.3-150200.3.2.6
- (no CPE)range: < 2.50.8-150200.3.5.5
- (no CPE)range: < 2.47.5-150200.3.4.4
- (no CPE)range: < 1.1.13-150200.4.30.4
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.19
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.17
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 4.3.13-150300.3.8.21
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 12.0-150200.9.2.2
- (no CPE)range: < 2.50.8-150200.3.5.5
- (no CPE)range: < 2.47.5-150200.3.4.4
- (no CPE)range: < 0.3.0-150200.3.2.2
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 4.2.17-150200.3.24.6
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 1.1.13-150200.4.30.4
- (no CPE)range: < 12.0-150200.9.2.2
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.19
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.17
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 4.3.13-150300.3.8.21
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 1.1.13-150200.4.30.4
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.17
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 17.32.2-150200.92.3
- (no CPE)range: < 1.14.69-150200.73.7
- (no CPE)range: < 4.1.5-150300.3.10.5
- (no CPE)range: < 1.1.3-24.18.1
- (no CPE)range: < 1.1.3-24.18.1
- (no CPE)range: < 1.1.3-24.18.1
- (no CPE)range: < 1.1.3-24.18.1
- (no CPE)range: < 1.2.4-150400.3.13.1
Packagekit Project/Packagekit
cpe:2.3:a:packagekit_project:packagekit:*:*:*:*:*:*:*:*
Range: <1.2.7
Red Hat/Enterprise Linux Server2 versions
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
github.com/PackageKit/PackageKit/commit/64278c9127e3333342b56ead99556161f7e86f79nvdPatch
access.redhat.com/security/cve/CVE-2024-0217nvdMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000