In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a potential use-after-free in bpf_link_free()
After commit 1a80dbcb2dba, bpf_link can be freed by
link->ops->dealloc_deferred, but the code still tests and uses
link->ops->dealloc afterward, which leads to a use-after-free as
reported by syzbot. Actually, one of them should be sufficient, so
just call one of them instead of both. Also add a WARN_ON() in case
of any problematic implementation.
References
Configurations
Configuration 1 (hide)
|
History
29 Aug 2024, 13:55
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux
Linux linux Kernel |
|
| CWE | CWE-416 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| References | () https://git.kernel.org/stable/c/2884dc7d08d98a89d8d65121524bb7533183a63a - Patch | |
| References | () https://git.kernel.org/stable/c/91cff53136daeff50816b0baeafd38a6976f6209 - Patch | |
| References | () https://git.kernel.org/stable/c/fa97b8fed9896f1e89cb657513e483a152d4c382 - Patch |
12 Jul 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-12 13:15
Updated : 2024-08-29 13:55
NVD link : CVE-2024-40909
Mitre link : CVE-2024-40909
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free