Use-after-free in Linux kernel sched

1) Use-after-free

EUVDB-ID: #VU97169

Risk: Low

CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-45016

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the netem_enqueue() function in net/sched/sch_netem.c. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

External links

http://git.kernel.org/stable/c/759e3e8c4a6a6b4e52ebc4547123a457f0ce90d4
http://git.kernel.org/stable/c/c414000da1c2ea1ba9a5e5bb1a4ba774e51e202d
http://git.kernel.org/stable/c/52d99a69f3d556c6426048c9d481b912205919d8
http://git.kernel.org/stable/c/0486d31dd8198e22b63a4730244b38fffce6d469
http://git.kernel.org/stable/c/577d6c0619467fe90f7e8e57e45cb5bd9d936014
http://git.kernel.org/stable/c/e5bb2988a310667abed66c7d3ffa28880cf0f883
http://git.kernel.org/stable/c/c07ff8592d57ed258afee5a5e04991a48dbaf382

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.