PT-2024-6948 · Linux+4 · Linux Kernel+4
Syzbot
·
Published
2024-06-03
·
Updated
2025-02-03
·
CVE-2024-40909
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a potential use-after-free in the
bpf link free() function. After a specific commit, bpf link can be freed by link->ops->dealloc deferred, but the code still tests and uses link->ops->dealloc afterward, leading to a use-after-free. This was reported by syzbot. The fix involves calling only one of these functions instead of both and adding a WARN ON() for any problematic implementation.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu