Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2024-49955

CVE-2024-49955MEDIUM

Linux Linux — ACPI: battery: Fix possible crash when unregistering a battery hook

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  N  N  H    5.5   .0034   25.8     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    fa93854f7a7ed63d054405bf3779247d5300edd3 –  —
  Linux    4.17 –                                      4.19.323

TIMELINE
  Oct 21  Reserved by Linux
  Oct 21  Published (CNA: Linux)
  Oct 15  ENRICHED — CVE-2024-49955 (Linux). Received CVSS 5.5 and CPE data from NVD.

CWE-672 · CNA: Linux · CVSS v3.1 · 13 references · NVD status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook provider cannot know that, so it will later call battery_hook_unregister() on the already unregistered battery hook, resulting in a crash. Fix this by using the list head to mark already unregistered battery hooks as already being unregistered so that they can be ignored by battery_hook_unregister().

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
October 21, 2024	Reserved	Reserved by Linux
October 21, 2024	Published	Published (CNA: Linux)
October 15, 2026	ENRICHED	ENRICHED — CVE-2024-49955 (Linux). Received CVSS 5.5 and CPE data from NVD.

Affected

Affected products and packages — 2 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Linux	Linux	—	fa93854f7a7ed63d054405bf3779247d5300edd3	—
Linux	Linux	—	4.17	4.19.323

Weaknesses

CWE-672

References (13)

Authoritative record: CVE-2024-49955 at cve.org

Vendors: linux

Weaknesses: CWE-672

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-49955 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.