PT-2024-6715 · Linux+6 · Linux Kernel+6
Amirmohammad Eftekhar
+1
·
Published
2024-05-23
·
Updated
2026-01-06
·
CVE-2024-39463
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux Kernel (affected versions not specified)
Description:
The issue is related to a use-after-free vulnerability in the Linux kernel's 9p file system. This occurs when a thread looks up a fid through dentry while another thread unlinks it, resulting in a use-after-free on dentry's d fsdata fid list. The problem arises because d fsdata was not accessed under d lock, and since d release() is normally only called once the dentry is no longer accessible, but it is also called explicitly in v9fs remove, the lock is required. The vulnerability can be exploited to potentially escalate privileges.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linux Kernel
Linuxmint
Red Os
Suse
Ubuntu