PT-2024-3408 · Linux+5 · Linux Kernel+5

Frank Li

·

Published

2024-02-19

·

Updated

2025-02-08

·

CVE-2024-26749

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to a use-after-free vulnerability in the cdns3 gadget ep disable() function. This vulnerability can be exploited to impact the confidentiality and availability of protected information. The problem occurs because list del init() uses priv req->list after it has been freed at cdns3 gadget ep free request(). To resolve this issue, list del init() should be moved before cdns3 gadget ep free request().
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-03680
CVE-2024-26749
DLA-3842-1
DSA-5658-1
DSA-5681-1
OESA-2025-1095
OESA-2025-1096
OPENSUSE-SU-2024_1490-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
SUSE-SU-2024:1490-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
USN-6820-1
USN-6820-2
USN-6821-1
USN-6821-2
USN-6821-3
USN-6821-4
USN-6828-1
USN-6831-1
USN-6867-1
USN-6871-1
USN-6892-1
USN-6919-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu