PT-2024-5415 · Linux+6 · Linux Kernel+6

Dicken.Ding

·

Published

2024-05-24

·

Updated

2025-09-29

·

CVE-2024-38385

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a use-after-free vulnerability in the irq find at or after() function. This function dereferences an interrupt descriptor returned by mt find() without holding the necessary locks, allowing the descriptor to be freed between mt find() and the dereference. The vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The use-after-free is reported by KASAN, with a call trace involving irq get next irq(), show stat(), seq read iter(), proc reg read iter(), and vfs read(). The vulnerability is caused by the lack of a RCU read lock section when accessing the interrupt descriptor.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-13979
BDU:2024-06059
CVE-2024-38385
MGASA-2024-0263
MGASA-2024-0266
OESA-2025-1729
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6999-1
USN-6999-2
USN-7004-1
USN-7005-1
USN-7005-2
USN-7008-1
USN-7029-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu