PT-2024-7703 · Linux+9 · Linux Kernel+9
Syzbot
·
Published
2024-02-19
·
Updated
2025-09-29
·
CVE-2024-26852
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588
Description
The vulnerability is related to a use-after-free issue in the
ip6 route mpath notify() function. This issue can be exploited to potentially elevate privileges in the system. The vulnerability was discovered by syzbot, and a commit was made to prevent the use-after-free, but it did not fully address the root cause. The fib6 info release() calls need to be deferred after ip6 route mpath notify() in the cleanup phase.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, versions after 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588 should include the necessary patches. As a temporary workaround, consider disabling the
ip6 route mpath notify() function until a patch is available. However, this may have unintended consequences on the system's networking functionality.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu