PT-2024-33844 · Linux+2 · Linux Kernel+2
Jiawei Ye
·
Published
2024-09-24
·
Updated
2025-04-01
·
CVE-2024-50005
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A potential RCU dereference issue was identified in the
mac802154 scan worker function. The scan req->type field was accessed after the RCU read-side critical section was unlocked, which is against RCU usage rules and can lead to unpredictable behavior, such as accessing memory that has been updated or causing use-after-free issues. This issue was detected using a static analysis tool designed to detect RCU-related problems. To fix this, the scan req->type value is now stored in a local variable scan req type while still within the RCU read-side critical section, ensuring safe access to the type value without violating RCU rules.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu