PT-2024-21551 · Linux+5 · Linux Kernel+5
Syzbot
·
Published
2024-02-28
·
Updated
2025-07-16
·
CVE-2024-26875
CVSS v3.1
6.4
Medium
| Vector | AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0-rc1-syzkaller-00046-gf1a27f081c1f
Description
A use-after-free vulnerability has been resolved in the Linux kernel, specifically in the pvrusb2 media driver. The issue occurred when Task A set
disconnect flag to a non-zero value, resulting in Task B's condition being met and releasing mp, leading to a slab-use-after-free error in pvr2 context set notify. This vulnerability was reported by Syzbot and is related to the pvr2 context set notify function in the pvrusb2-context.c file.Recommendations
To resolve this issue, place the
disconnect flag assignment operation after all code in pvr2 context disconnect() to avoid the use-after-free error. This change will prevent the mp release from occurring prematurely, thus fixing the vulnerability.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu