Към съдържанието
Търсене

CVE-2024-36886: Linux, грешка в паметта

9.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN: slab-use-after-free in kfree_skb_list_reason+0x47e/0x4c0 linux/net/core/skbuff.c:1183 Read of size 8 at addr ffff88804d2a7c80 by task poc/8034 CPU: 1 PID: 8034 Comm: poc Not tainted 6.8.2 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014 Call Trace: <IRQ> __dump_stack linux/lib/dump_stack.c:88 dump_stack_lvl+0xd9/0x1b0 linux/lib/dump_stack.c:106 print_address_description linux/mm/kasan/report.c:377 print_report+0xc4/0x620 linux/mm/kasan/report.c:488 kasan_report+0xda/0x110 linux/mm/kasan/report.c:601 kfree_skb_list_reason+0x47e/0x4c0 linux/net/core/skbuff.c:1183 skb_release_data+0x5af/0x880 linux/net/core/skbuff.c:1026 skb_release_all linux/net/core/skbuff.c:1094 __kfree_skb linux/net/core/skbuff.c:1108 kfree_skb_reason+0x12d/0x210 linux/net/core/skbuff.c:1144 kfree_skb linux/./include/linux/skbuff.h:1244 tipc_buf_append+0x425/0xb50 linux/net/tipc/msg.c:186 tipc_link_input+0x224/0x7c0 linux/net/tipc/link.c:1324 tipc_link_rcv+0x76e/0x2d70 linux/net/tipc/link.c:1824 tipc_rcv+0x45f/0x10f0 linux/net/tipc/node.c:2159 tipc_udp_recv+0x73b/0x8f0 linux/net/tipc/udp_media.c:390 udp_queue_rcv_one_skb+0xad2/0x1850 linux/net/ipv4/udp.c:2108 udp_queue_rcv_skb+0x131/0xb00 linux/net/ipv4/udp.c:2186 udp_unicast_rcv_skb+0x165/0x3b0 linux/net/ipv4/udp.c:2346 __udp4_lib_rcv+0x2594/0x3400 linux/net/ipv4/udp.c:2422 ip_protocol_deliver_rcu+0x30c/0x4e0 linux/net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x2e4/0x520 linux/net/ipv4/ip_input.c:233 NF_HOOK linux/./include/linux/netfilter.h:314 NF_HOOK linux/./include/linux/netfilter.h:308 ip_local_deliver+0x18e/0x1f0 linux/net/ipv4/ip_input.c:254 dst_input linux/./include/net/dst.h:461 ip_rcv_finish linux/net/ipv4/ip_input.c:449 NF_HOOK linux/./

Засегнати продукти

  • Linux Linux: 1149557d64c97dc9adf3103347a1c0e8c06d3b89 преди e19ec8ab0e25bc4803d7cc91c84e84532e2781bd; 1149557d64c97dc9adf3103347a1c0e8c06d3b89 преди 93bc2d6d16f2c3178736ba6b845b30475856dc40; 1149557d64c97dc9adf3103347a1c0e8c06d3b89 преди 367766ff9e407f8a68409b7ce4dc4d5a72afeab1; 1149557d64c97dc9adf3103347a1c0e8c06d3b89 преди 66116556076f0b96bc1aa9844008c743c8c67684; 1149557d64c97dc9adf3103347a1c0e8c06d3b89 преди 21ea04aad8a0839b4ec27ef1691ca480620e8e14; 1149557d64c97dc9adf3103347a1c0e8c06d3b89 преди ffd4917c1edb3c3ff334fce3704fbe9c39f35682; 1149557d64c97dc9adf3103347a1c0e8c06d3b89 преди a0fbb26f8247e326a320e2cb4395bfb234332c90; 1149557d64c97dc9adf3103347a1c0e8c06d3b89 преди 080cbb890286cd794f1ee788bbc5463e2deb7c2b
  • Linux Linux: 4.1; преди 4.1; 4.19.314 до 4.19.*; 5.4.276 до 5.4.*; 5.10.217 до 5.10.*; 5.15.159 до 5.15.*; 6.1.91 до 6.1.*; 6.6.31 до 6.6.*; 6.8.10 до 6.8.*; от 6.9 нататък
  • linux linux_kernel: 4.1

Вид слабост

История

  • 30 май 2024 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2024-36886: Linux, грешка в паметта | freedomonline.bg