PT-2024-3836 · Linux+5 · Linux Kernel+5
Zheng Yejian
·
Published
2024-04-10
·
Updated
2025-03-28
·
CVE-2024-35955
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a possible use-after-free problem in the kprobes registration of the Linux kernel. When unloading a module, its state changes, and if
is module text address() and module text address() are used separately, there is a chance that the first one succeeds but the next one fails because the module's state becomes MODULE STATE UNFORMED between these operations. In the check kprobe address safe() function, if the second module text address() fails, it is ignored because it expected a kernel text address, but it may have failed simply because the module's state has been changed to MODULE STATE UNFORMED. This can cause arm kprobe() to try to modify a non-existent module text address, resulting in a use-after-free issue.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu