PT-2024-8530 · Linux+8 · Linux Kernel+8
Published
2024-10-23
·
Updated
2025-10-03
·
CVE-2024-50127
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.61
Description
The issue is related to the
taprio change() function in the net/sched/sch taprio.c module of the Linux kernel's net/sched component. It involves a use-after-free vulnerability due to a race condition, where the admin pointer may become dangling because of scheduling switch or removal caused by advance sched(). This can lead to an impact on the confidentiality, integrity, and availability of protected information. The critical section protected by q->current entry lock is too small to prevent such a scenario, resulting in a use-after-free detected by KASAN.Recommendations
For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider restricting access to the
taprio change() function until a patch is available. Additionally, prefer using rcu replace pointer() over rcu assign pointer() to update the admin pointer immediately before attempting to schedule freeing.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu