#VU98873 Use-after-free in Linux kernel - CVE-2024-49936

Vulnerability identifier: #VU98873

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49936

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the xenvif_new_hash() and xenvif_flush_hash() functions in drivers/net/xen-netback/hash.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/a7f0073fcd12ed7de185ef2c0af9d0fa1ddef22c
https://git.kernel.org/stable/c/a0465723b8581cad27164c9073fd780904cd22d4
https://git.kernel.org/stable/c/efcff6ce7467f01f0753609f420333f3f2ceceda
https://git.kernel.org/stable/c/143edf098b80669d05245b2f2367dd156a83a2c5
https://git.kernel.org/stable/c/d408889d4b54f5501e4becc4dbbb9065143fbf4e
https://git.kernel.org/stable/c/54d8639af5568fc41c0e274fc3ec9cf86c59fcbb
https://git.kernel.org/stable/c/0fa5e94a1811d68fbffa0725efe6d4ca62c03d12

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.