PT-2025-3597 · Linux+5 · Linux Kernel+5

Published 2024-12-19 · Updated 2026-05-26 · CVE-2024-57857

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the RDMA/siw component in the Linux kernel. It was resolved by removing the direct link to net device and instead relying on the management of net device by associated ib devices. A local link to net device was not properly managed, leading to a 'KASAN: slab-use-after-free' exception during the siw query port() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2025-12647

AZL-58974

AZL-59028

BDU:2025-02804

CVE-2024-57857

ECHO-58D6-0BF5-AF10

OESA-2025-1202

OESA-2025-1203

OESA-2025-1446

OESA-2025-1450

OPENSUSE-SU-2025_0428-1

OPENSUSE-SU-2025_0499-1

OPENSUSE-SU-2025_0557-1

SUSE-SU-2025:0289-1

SUSE-SU-2025:0428-1

SUSE-SU-2025:0499-1

SUSE-SU-2025:0557-1

SUSE-SU-2025:20165-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20248-1

SUSE-SU-2025:20249-1

SUSE-SU-2025_0428-1

SUSE-SU-2025_0499-1

SUSE-SU-2025_0557-1

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

Affected Products

Alt Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1966

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57857.json · Exploit
• https://ubuntu.com/security/CVE-2024-56627 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56602 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-57911 · Security Note
• https://ubuntu.com/security/CVE-2024-56647 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21858 · Security Note
• https://ubuntu.com/security/CVE-2024-57849 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56573 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41932 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56713 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7379-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21964 · Security Note