PT-2025-9941 · Linux+3 · Linux Kernel+3
Robert Morris
·
Publicado
2024-12-20
·
Atualizado
2025-05-28
·
CVE-2024-58060
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free issue has been identified in the Linux kernel related to the bpf struct ops when CONFIG MODULES=n. The problem arises because the btf id of the "struct module" is missing, which prevents bpf try module get() from performing correct refcounting for struct ops that have a "struct module *owner" member. This issue affects struct ops that require the "struct module *owner" member, such as tcp congestion ops, but not all subsystems' struct ops, like sched ext ops. The issue has existed since the introduction of bpf struct ops and has undergone many changes.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linuxmint
Linux Kernel
Ubuntu