Description
A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Kernel
Default version status: unaffected
2.6.12 to < 6.7affected
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=e2b706c691905fe78468c361aaabc719d0a496f1 ↗
- https://kernel.dance/e2b706c691905fe78468c361aaabc719d0a496f1 ↗
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html ↗
- https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html ↗
- http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html ↗