PT-2024-6714 · Linux+9 · Linux Kernel+9
Mostafa Saleh
·
Published
2024-06-24
·
Updated
2025-09-29
·
CVE-2024-41096
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a use-after-free vulnerability in the
msi capability init function. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability occurs due to a failure in the msi domain alloc locked function, which leads to the descriptor being freed and then accessed in the error exit path of pci msi setup msi irqs in msi capability init. The solution involves copying the descriptor and using the copy for the error exit path unmask operation.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu