PT-2024-36939 · Linux+8 · Linux Kernel+8
Syzbot
·
Published
2024-12-04
·
Updated
2025-10-03
·
CVE-2024-56631
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A use-after-free bug was found in the
sg release() function, which can cause a slab-use-after-free error. The bug occurs when the kref put() function is called before releasing the open rel lock mutex, potentially decrementing the reference count of sfp to zero and triggering its cleanup. This can lead to references to sfp or sdp after the reference count is decremented, resulting in a use-after-free error. The fix involves moving the kref put() call after unlocking the open rel lock mutex to ensure proper sequencing of resource cleanup and mutex operations.Recommendations
To resolve the issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider restricting access to the
sg release() function until a patch is available. Additionally, avoid using the kref put() function before releasing the open rel lock mutex to minimize the risk of exploitation.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu