PT-2024-33707 · Linux+8 · Linux Kernel+8
Thomas Weißschuh
·
Published
2024-08-02
·
Updated
2025-11-18
·
CVE-2024-49860
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A vulnerability in the Linux kernel has been identified where the
description show() function accesses invalid memory if the return type of the STR method is not a buffer object. Only buffer objects are valid return values of STR.Recommendations:
For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the
STR method to minimize the risk of exploitation.Exploit
Fix
Type Confusion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu