PT-2024-3401 · Linux · Linux Kernel

Jiri Pirko · Published 2024-02-08 · Updated 2024-04-04 · CVE-2024-26724

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-rc2jiri+

Description: The vulnerability is related to a use-after-free issue in the mlx5 dpll remove function, which can cause a denial-of-service. The issue occurs when a delayed work timer is triggered, allowing an attacker to exploit the vulnerability. The estimated number of potentially affected devices is not specified.

Recommendations: To resolve the issue, update the Linux kernel to version 6.8.0-rc2jiri or later. As a temporary workaround, consider disabling the mlx5 dpll remove function until a patch is available. Restrict access to the vulnerable module mlx5 dpll to minimize the risk of exploitation. Avoid using the mlx5 dpll probe function in the affected API endpoint until the issue is resolved.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-03673

CVE-2024-26724

Affected Products

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26724.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26724 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26724 · Security Note
• https://git.kernel.org/stable/c/aa1eec2f546f2afa8c98ec41e5d8ee488165d685 · Patch
• https://git.kernel.org/stable/c/1596126ea50228f0ed96697bae4e9368fda02c56 · Patch
• https://osv.dev/vulnerability/CVE-2024-26724 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-26724 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26724 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26724 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26724 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-26724 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03673 · Security Note
• https://docs.bell-sw.com/security/cves/CVE-2024-26724 · Note
• https://git.kernel.org/linus/aa1eec2f546f2afa8c98ec41e5d8ee488165d685 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26724 · Note