PT-2024-9694 · Linux+6 · Linux Kernel+6
Baokun Li
+1
·
Published
2024-05-22
·
Updated
2025-09-29
·
CVE-2024-40913
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the use of memory after it has been freed in the cachefiles module of the Linux kernel. This can cause a cache Use After Free (UAF) condition. The problem arises when an anonymous file descriptor is installed and then closed, potentially before the reference count of the cache is obtained. To resolve this, the cache reference count should be grabbed before installing the file descriptor. By kernel convention, the file descriptor is taken over by user land after installation, and the kernel should not call close on it after that. The fix involves calling fd install after everything is ready, specifically after copy to user succeeds.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu