---
id: CVE-2024-49945
title: 'net/ncsi: Disable the ncsi work before freeing the associated structure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net/ncsi: Disable the ncsi work before freeing the associated structure

  The work function can run after the ncsi device is freed, resulting
  in use-after-free bugs or k…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2d283bdd079c0ad4da020bbc9e9c2a4280823098 <
    64704f231d5dee8639e256507178f43dde1f131c
  - >-
    Linux >= 2d283bdd079c0ad4da020bbc9e9c2a4280823098 <
    f6ca58696749268181f43150b3553f2bafd71e42
  - >-
    Linux >= 2d283bdd079c0ad4da020bbc9e9c2a4280823098 <
    dd41dab62f32d9e9e0669af8459d12a93834b238
  - >-
    Linux >= 2d283bdd079c0ad4da020bbc9e9c2a4280823098 <
    a0ffa68c70b367358b2672cdab6fa5bc4c40de2c
  - Linux 4.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-10-22T13:37:11.616552Z'
published: '2024-10-21'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:35:25.520Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-49945'
references:
  - url: 'https://git.kernel.org/stable/c/64704f231d5dee8639e256507178f43dde1f131c'
  - url: 'https://git.kernel.org/stable/c/f6ca58696749268181f43150b3553f2bafd71e42'
  - url: 'https://git.kernel.org/stable/c/dd41dab62f32d9e9e0669af8459d12a93834b238'
  - url: 'https://git.kernel.org/stable/c/a0ffa68c70b367358b2672cdab6fa5bc4c40de2c'
tags:
  - cve.org
epss: 0.00274
epssPercentile: 0.19681
ingestedAt: '2026-10-21T12:48:53.726Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net/ncsi: Disable the ncsi work before freeing the associated structure

The work function can run after the ncsi device is freed, resulting
in use-after-free bugs or kernel panic.

## Affected

- `Linux >= 2d283bdd079c0ad4da020bbc9e9c2a4280823098 < 64704f231d5dee8639e256507178f43dde1f131c`
- `Linux >= 2d283bdd079c0ad4da020bbc9e9c2a4280823098 < f6ca58696749268181f43150b3553f2bafd71e42`
- `Linux >= 2d283bdd079c0ad4da020bbc9e9c2a4280823098 < dd41dab62f32d9e9e0669af8459d12a93834b238`
- `Linux >= 2d283bdd079c0ad4da020bbc9e9c2a4280823098 < a0ffa68c70b367358b2672cdab6fa5bc4c40de2c`
- `Linux 4.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.