Vulnerability identifier: #VU90047

Vulnerability risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-36904

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the tcp_twsk_unique() function in net/ipv4/tcp_ipv4.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/84546cc1aeeb4df3e444b18a4293c9823f974be9
http://git.kernel.org/stable/c/1796ca9c6f5bd50554214053af5f47d112818ee3
http://git.kernel.org/stable/c/1d9cf07810c30ef7948879567d10fd1f01121d34
http://git.kernel.org/stable/c/27b0284d8be182a81feb65581ab6a724dfd596e8
http://git.kernel.org/stable/c/13ed7cdf079686ccd3618335205700c03f6fb446
http://git.kernel.org/stable/c/6e48faad92be13166184d21506e4e54c79c13adc
http://git.kernel.org/stable/c/517e32ea0a8c72202d0d8aa8df50a7cd3d6fdefc
http://git.kernel.org/stable/c/f2db7230f73a80dbb179deab78f88a7947f0ab7e

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.