PT-2024-32207 · Linux+2 · Linux Kernel+2

Published 2024-09-06 · Updated 2025-09-29 · CVE-2024-46801

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the get stashed dentry() function in the Linux kernel, which tries to optimistically retrieve a stashed dentry from a provided location. To prevent Use-After-Free (UAF) issues, it needs to ensure that the rcu lock is held before dereferencing the stashed location. The fix involves using rcu dereference() instead of READ ONCE(), which is effectively equivalent but provides additional lockdep checks and clearly communicates the expectation of rcu protection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-13260

BDU:2025-03583

CVE-2024-46801

Affected Products

Alt Linux

Astra Linux

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46801.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2024-46801 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-46801 · Vendor Advisory
• https://git.kernel.org/stable/c/4e32c25b58b945f976435bbe51f39b32d714052e · Patch
• https://git.kernel.org/stable/c/03e2a1209a83a380df34a72f7d6d1bc6c74132c7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-46801 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46801 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-46801 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-46801 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-46801 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46801 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03583 · Security Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10.10 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://t.me/cvedetector/5938 · Telegram Post