PT-2024-3416 · Linux+5 · Linux Kernel+5
Horatiu Vultur
·
Published
2024-03-04
·
Updated
2025-03-28
·
CVE-2024-26856
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the sparx5 del mact entry function. When an entry from the MAC table is removed, the entry is still used after being freed, which can lead to a denial of service. The vulnerability is caused by the vid of the mac entry being used after calling devm kfree on the mac entry. The fix involves first using the vid of the mac entry to delete the entry from the hardware and then freeing it.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu