PT-2024-8533 · Linux+4 · Linux Kernel+4
Kaixin Wang
·
Published
2024-09-17
·
Updated
2025-04-01
·
CVE-2024-49874
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
The issue is related to a use-after-free vulnerability in the
svc i3c master driver due to a race condition. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability occurs when the svc i3c master remove function is called, which frees the master->base resource, while the svc i3c master hj work and svc i3c master ibi work functions are still using it. The sequence of operations that may lead to a UAF bug involves the svc i3c master remove function being called on one CPU core while the svc i3c master hj work function is being executed on another CPU core.Recommendations
To resolve the issue, ensure that the work is canceled before proceeding with the cleanup in the
svc i3c master remove function. As a temporary workaround, consider disabling the svc i3c master driver until a patch is available. Update to Linux kernel version 6.6.58 or later to fix the vulnerability.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu