VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 21, 2024· Updated May 12, 2026

CVE-2024-49955

CVE-2024-49955

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: battery: Fix possible crash when unregistering a battery hook

When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook provider cannot know that, so it will later call battery_hook_unregister() on the already unregistered battery hook, resulting in a crash.

Fix this by using the list head to mark already unregistered battery hooks as already being unregistered so that they can be ignored by battery_hook_unregister().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Linux kernel ACPI battery driver crash due to double unregistration of a battery hook after an error.

Vulnerability

Description

The vulnerability resides in the Linux kernel's ACPI battery driver. When a battery hook (a callback invoked during battery events) returns an error during battery addition, the kernel automatically unregisters the hook. However, the provider of the hook is unaware of this automatic unregistration and may later call battery_hook_unregister() again. This double unregistration leads to a crash, likely due to a use-after-free or null pointer dereference.

Exploitation

Exploitation requires local access with low privileges (CVSS v3.1 Base Score 5.5, vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). An attacker could trigger the bug by causing a battery hook to fail during battery addition, then inducing the provider to attempt to unregister the already removed hook. No authentication or user interaction beyond standard system access is needed.

Impact

The impact is limited to denial of service (system crash). There is no risk of information disclosure or privilege escalation. The vulnerability can be leveraged to cause a system-wide crash, potentially leading to loss of availability.

Mitigation

The fix, introduced in kernel commits [3] and [4], marks battery hooks as already unregistered using the list head, allowing battery_hook_unregister() to ignore them. Siemens has acknowledged this CVE as affecting their SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (see reference [2]). Users should apply the kernel patch or update to a fixed kernel version.

References
  1. SSA-265688
  2. Making sure you're not a bot!
  3. Making sure you're not a bot!

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

107

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

13

News mentions

0

No linked articles in our index yet.