PT-2024-35617 · Linux+7 · Linux Kernel+7
Waqar Hameed
·
Published
2024-11-14
·
Updated
2025-11-17
·
CVE-2024-53171
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free issue has been identified in the Linux kernel, specifically in the
ubifs tnc end commit function. This issue can be triggered by inserting a new node into the TNC tree, causing the tree to split and a node's znode->parent to change. If other nodes in the tree are deleted, the znode->cparent of the affected node may still point to a freed node, leading to a use-after-free error when accessing znode->cparent in write index(). This can be exploited by running a specific sequence of commands, including rm -f /etc/test-file.bin and dd if=/dev/urandom of=/etc/test-file.bin bs=1M count=60 conv=fsync, in a loop, with CONFIG UBIFS FS AUTHENTICATION enabled. The issue can be fixed by explicitly setting znode->cparent to NULL in get znodes to commit() for the root node.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu