#VU100707 Use-after-free in Linux kernel - CVE-2024-53057

Vulnerability identifier: #VU100707

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53057

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the qdisc_tree_reduce_backlog() function in net/sched/sch_api.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/e7f9a6f97eb067599a74f3bcb6761976b0ed303e
https://git.kernel.org/stable/c/dbe778b08b5101df9e89bc06e0a3a7ecd2f4ef20
https://git.kernel.org/stable/c/ce691c814bc7a3c30c220ffb5b7422715458fd9b
https://git.kernel.org/stable/c/05df1b1dff8f197f1c275b57ccb2ca33021df552
https://git.kernel.org/stable/c/580b3189c1972aff0f993837567d36392e9d981b
https://git.kernel.org/stable/c/597cf9748c3477bf61bc35f0634129f56764ad24
https://git.kernel.org/stable/c/9995909615c3431a5304c1210face5f268d24dba
https://git.kernel.org/stable/c/2e95c4384438adeaa772caa560244b1a2efef816

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.