PT-2024-4090 · Linux+6 · Linux Kernel+6

Sungwoo Kim

·

Published

2024-05-03

·

Updated

2026-05-26

·

CVE-2024-36012

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a slab-use-after-free vulnerability in the msft do close() function. This vulnerability is caused by a race condition where the msft->data is freed in hci release dev() but still used in msft do close(). The vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. Technical details about exploitation include the use of the mutex lock() function on a freed msft->filter lock and the kfree() function to free the msft data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Use After Free

Weakness Enumeration

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2024-04541
CVE-2024-36012
INFSA-2025_6966
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-2296
RHSA-2025:6966
RHSA-2025_6966
SUSE-SU-2024:2008-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2135-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20249-1
USN-6949-1
USN-6949-2
USN-6952-1
USN-6952-2
USN-6955-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu