#VU91063 Use-after-free in Linux kernel - CVE-2024-26856

Vulnerability identifier: #VU91063

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26856

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the sparx5_del_mact_entry() function in drivers/net/ethernet/microchip/sparx5/sparx5_mactable.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/e46274df1100fb0c06704195bfff5bfbd418bf64
https://git.kernel.org/stable/c/0de693d68b0a18d5e256556c7c62d92cca35ad52
https://git.kernel.org/stable/c/e83bebb718fd1f42549358730e1206164e0861d6
https://git.kernel.org/stable/c/71809805b95052ff551922f11660008fb3666025
https://git.kernel.org/stable/c/89d72d4125e94aa3c2140fedd97ce07ba9e37674

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.