PT-2024-3420 · Linux+5 · Linux Kernel+5
David Mosberger-Tan
·
Published
2024-02-15
·
Updated
2025-02-03
·
CVE-2024-26895
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.8.0-rc1+ #117
Description:
The vulnerability is related to a use-after-free issue in the
wilc netdev cleanup function when cleaning up all interfaces. This can be triggered by removing the module or unbinding the device from the driver, and can cause a denial of service. The issue is due to netdevice unregistration during vif list traversal, which frees the netdevice object and the corresponding vif object. The next occurrence of the loop then tries to access the freed vif pointer, causing the use-after-free.To fix this issue, two mechanisms are used: navigating the list with
list for each entry safe to safely modify the list, and waiting for the RCU grace period end after each vif removal to ensure it is safe to free the corresponding vif.Recommendations:
To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. If updating is not possible, consider disabling the
wilc netdev cleanup function or restricting access to the vulnerable module until a patch is available.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu