PT-2024-3373 · Linux+1 · Linux Kernel+1

Published 2024-02-28 · Updated 2025-03-05 · CVE-2024-27061

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description The vulnerability is related to a use-after-free issue in the sun8i ce cipher unprepare function. This function should be called before crypto finalize skcipher request because client callbacks may immediately free memory that is no longer needed. However, this memory is still used by sun8i ce cipher unprepare after it has been freed, resulting in a pointer dereference problem during a crypto self-test. The issue is detected by KASAN and can cause a kernel NULL pointer dereference.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. As a temporary workaround, consider disabling the sun8i ce cipher unprepare function until a patch is available. However, this may have unintended consequences and should be done with caution.

Note: The provided input does not specify the exact fixed version of the Linux kernel. Therefore, the recommendation is to update to the latest version available.

Exploit

Fix

Use After Free

NULL Pointer Dereference

Weakness Enumeration

CWE-416

CWE-476

Related Identifiers

AZL-40334

BDU:2024-03645

CVE-2024-27061

Affected Products

Linux Kernel

Red Os

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27061.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-27061 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27061 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-27061 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03645 · Security Note
• https://osv.dev/vulnerability/CVE-2024-27061 · Vendor Advisory
• https://git.kernel.org/stable/c/dc60b25540c82fc4baa95d1458ae96ead21859e0 · Patch
• https://cve.org/CVERecord?id=CVE-2024-27061 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://git.kernel.org/stable/c/183420038444547c149a0fc5f58e792c2752860c · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-27061 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-40334 · Vendor Advisory
• https://git.kernel.org/stable/c/51a7d338c212e0640b1aca52ba6590d5bea49879 · Patch
• https://ubuntu.com/security/CVE-2024-27061 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-27061 · Vendor Advisory