PT-2024-8240 · Linux+8 · Linux Kernel+8
Jiri Slaby
+1
·
Published
2024-10-11
·
Updated
2026-05-26
·
CVE-2024-50073
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.11.0+
Description:
The issue is related to a use-after-free vulnerability in the
gsm cleanup mux function in the Linux kernel. This vulnerability can be exploited by an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability occurs when gsm msg on the tx ctrl list or tx data list of gsm mux can be freed by multiple threads through ioctl, leading to a use-after-free condition. The vulnerability can be protected by using the gsm tx lock.Recommendations:
To resolve the issue, update the Linux kernel to a version that includes the fix for the
gsm cleanup mux use-after-free vulnerability.
As a temporary workaround, consider restricting access to the ioctl function to minimize the risk of exploitation.
Additionally, ensure that the gsm tx lock is properly used to protect against the use-after-free condition.Exploit
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu