Linux · Linux Kernel · CVE-2024-26856
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the sparx5 del mact entry function. When an entry from the MAC table is removed, the entry is still used after being freed, which can lead to a denial of service. The vulnerability is caused by the vid of the mac entry being used after calling devm kfree on the mac entry. The fix involves first using the vid of the mac entry to delete the entry from the hardware and then freeing it.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.