Linux · Linux Kernel · CVE-2024-26634
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the removal of a namespace with conflicting altnames in the Linux kernel. When a net namespace is removed, it may cause a kernel bug, potentially leading to the overwriting of the main interface name. The problem arises when physical interfaces are moved outside of init net and get "refunded" to init net when the namespace disappears. Recent fixes have addressed ensuring that altnames get moved with the main interface, which has surfaced this problem. The vulnerability is associated with the use of memory after it has been freed, which could impact the confidentiality, integrity, and availability of protected information.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.