CVE-2024-0217

NameCVE-2024-0217
DescriptionA use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Notes

Unclear CVE assignment for packagekit, it was never clarified what is was about (see also #1060016)
https://bugzilla.redhat.com/show_bug.cgi?id=2256624

Search for package or bug name: Reporting problems