PT-2023-8340 · Linux · Linux Kernel

Published 2023-11-23 · Updated 2024-02-14 · CVE-2024-0584

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to a use-after-free problem in the implementation of the IGMPv2 protocol in the Linux kernel, specifically in the igmp start timer function in net/ipv4/igmp.c. This allows a local user to observe a refcnt use-after-free issue when receiving an IGMP query packet, leading to a kernel information leak. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2024-1867

BDU:2024-00524

CVE-2024-0584

Affected Products

Linux Kernel

References · 63

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=2258584 · Exploit
• https://bdu.fstec.ru/vul/2024-00896 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607 · Security Note
• https://bdu.fstec.ru/vul/2024-00524 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/704823 · Security Note
• https://bdu.fstec.ru/vul/2024-00581 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/705075 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-0584 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565 · Security Note
• https://bdu.fstec.ru/vul/2023-07978 · Security Note
• https://errata.altlinux.org/ALT-PU-2024-1867 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/705077 · Security Note