PT-2024-1851 · Linux+4 · Linux Kernel+4

Published 2024-01-14 · Updated 2024-08-27 · CVE-2024-26592

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free (UAF) problem in the ksmbd tcp new connection() function. This function is part of the Linux kernel's implementation of the Server Message Block (SMB) protocol. The vulnerability arises from a race condition between the handling of new TCP connections and their disconnection, leading to the use of memory after it has been freed. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Race Condition

Weakness Enumeration

CWE-416

CWE-362

Related Identifiers

BDU:2024-01606

CVE-2024-26592

OESA-2024-1765

OESA-2024-1768

USN-6688-1

USN-6765-1

USN-6766-1

USN-6766-2

USN-6766-3

USN-6795-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

USN-6828-1

ZDI-24-195

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 494

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26592.json · Exploit
• 🔥 https://github.com/Notselwyn/CVE-2024-1086 · Exploit
• 🔥 https://github.com/LLfam/CVE-2024-1086 · Exploit
• https://ubuntu.com/security/CVE-2023-52642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52644 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6766-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35811 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27044 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26921 · Security Note
• https://ubuntu.com/security/CVE-2024-26602 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1765 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26838 · Vendor Advisory