Use-after-free in Linux kernel unix

1) Use-after-free

EUVDB-ID: #VU98896

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-47711

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the TEST_F() function in tools/testing/selftests/net/af_unix/msg_oob.c, within the manage_oob() and unix_ioctl() functions in net/unix/af_unix.c. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 6.11 - 6.11.1

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:6.11:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.11.1:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/4a7f9a2591a923bdde4bd7eac33490b6ae3b257c
https://git.kernel.org/stable/c/5aa57d9f2d5311f19434d95b2a81610aa263e23b
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.2
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.