PT-2024-3472 · Linux+3 · Linux Kernel+3

Published 2024-01-31 · Updated 2024-08-21 · CVE-2024-26624

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a flaw in the unix state double lock() function within the net/unix/af unix.c module of the Linux kernel, affecting the AF UNIX socket implementation. This flaw is associated with a synchronization mechanism disruption. Exploitation of this issue could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-833

Related Identifiers

BDU:2024-03767

CVE-2024-26624

USN-6688-1

Affected Products

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 94

• 🔥 https://github.com/Notselwyn/CVE-2024-1086 · Exploit
• 🔥 https://github.com/LLfam/CVE-2024-1086 · Exploit
• https://ubuntu.com/security/CVE-2024-26627 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26625 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26599 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52444 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52447 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52445 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52438 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52588 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26597 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26600 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52606 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26589 · Vendor Advisory