#VU98889 Use-after-free in Linux kernel - CVE-2024-47748

Vulnerability identifier: #VU98889

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-47748

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the vhost_vdpa_setup_vq_irq(), vhost_vdpa_vring_ioctl() and vhost_vdpa_open() functions in drivers/vhost/vdpa.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/0c170b1e918b9afac25e2bbd01eaa2bfc0ece8c0
https://git.kernel.org/stable/c/927a2580208e0f9b0b47b08f1c802b7233a7ba3c
https://git.kernel.org/stable/c/ec5f1b54ceb23475049ada6e7a43452cf4df88d1
https://git.kernel.org/stable/c/ca64edd7ae93402af2596a952e0d94d545e2b9c0
https://git.kernel.org/stable/c/fae9b1776f53aab93ab345bdbf653b991aed717d
https://git.kernel.org/stable/c/7cf2fb51175cafe01df8c43fa15a06194a59c6e2
https://git.kernel.org/stable/c/02e9e9366fefe461719da5d173385b6685f70319

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.