PT-2024-30740 · Linux+5 · Linux Kernel+5
Oliver Neukum
·
Published
2024-07-31
·
Updated
2025-02-05
·
CVE-2024-43883
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the fix
Description
A vulnerability in the Linux kernel has been resolved, specifically in the usb: vhci-hcd driver. The issue involves the driver carrying stale pointers to references that can still be used, which can lead to potential security risks. The vulnerability affects versions prior to the fix, and remediation is available in versions post-commit.
Recommendations
Update to a version of the Linux kernel that includes the fix for this vulnerability to ensure security.
As a temporary workaround, consider disabling the vulnerable
usb: vhci-hcd driver until a patch is available.Exploit
Fix
Use After Free
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu