Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-26898— aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于内存释放后重用。

CVSS 7.8 · High EPSS 0.31% · P22

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 20

VendorProduct Version RangeStatus
Linux Linux 7562f876cd93800f2f8c89445f2a563590b24e09< ad80c34944d7175fa1f5c7a55066020002921a99 affected
7562f876cd93800f2f8c89445f2a563590b24e09< 1a54aa506b3b2f31496731039e49778f54eee881 affected
7562f876cd93800f2f8c89445f2a563590b24e09< faf0b4c5e00bb680e8e43ac936df24d3f48c8e65 affected
7562f876cd93800f2f8c89445f2a563590b24e09< 7dd09fa80b0765ce68bfae92f4e2f395ccf0fba4 affected
7562f876cd93800f2f8c89445f2a563590b24e09< 74ca3ef68d2f449bc848c0a814cefc487bf755fa affected
7562f876cd93800f2f8c89445f2a563590b24e09< eb48680b0255a9e8a9bdc93d6a55b11c31262e62 affected
7562f876cd93800f2f8c89445f2a563590b24e09< 079cba4f4e307c69878226fdf5228c20aa1c969c affected
7562f876cd93800f2f8c89445f2a563590b24e09< a16fbb80064634b254520a46395e36b87ca4731e affected
… +12 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-26898

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution. In aoecmd_cfg_pkts(), it always calls dev_put(ifp) when skb initial code is finished. But the net_device ifp will still be used in later tx()->dev_queue_xmit() in kthread. Which means that the dev_put(ifp) should NOT be called in the success path of skb initial code in aoecmd_cfg_pkts(). Otherwise tx() may run into use-after-free because the net_device is freed. This patch removed the dev_put(ifp) in the success path in aoecmd_cfg_pkts(), and added dev_put() after skb xmit in tx().
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于内存释放后重用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 7562f876cd93800f2f8c89445f2a563590b24e09 ~ ad80c34944d7175fa1f5c7a55066020002921a99 -
Linux Linux 2.6.22 -

II. Public POCs for CVE-2024-26898

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-26898

请登录查看更多情报信息。

Mailing List Discussions for CVE-2024-26898 (2)

Other References for CVE-2024-26898 (8)

Same Patch Batch · Linux · 2024-04-17 · 100 CVEs total

CVE-2024-26877 9.8 CRITICAL crypto: xilinx - call finalize with bh disabled
CVE-2024-26853 9.8 CRITICAL igc: avoid returning frame twice in XDP_REDIRECT
CVE-2024-26828 9.4 CRITICAL cifs: fix underflow in parse_server_interfaces()
CVE-2024-26856 8.8 HIGH net: sparx5: Fix use after free inside sparx5_del_mact_entry
CVE-2024-26822 8.7 HIGH smb: client: set correct id, uid and cruid for multiuser automounts
CVE-2024-26830 8.4 HIGH i40e: Do not allow untrusted VF to remove administratively set MAC
CVE-2024-26890 7.8 HIGH Bluetooth: btrtl: fix out of bounds memory access
CVE-2024-26852 7.8 HIGH net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
CVE-2024-26864 7.8 HIGH tcp: Fix refcnt handling in __inet_hash_connect().
CVE-2024-26895 7.8 HIGH wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
CVE-2024-26880 7.8 HIGH dm: call the resume method on internal suspend
CVE-2024-26865 7.8 HIGH rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
CVE-2024-26869 7.8 HIGH f2fs: fix to truncate meta inode pages forcely
CVE-2024-26870 7.8 HIGH NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
CVE-2024-26838 7.8 HIGH RDMA/irdma: Fix KASAN issue with tasklet
CVE-2024-26885 7.8 HIGH bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
CVE-2024-26911 7.8 HIGH drm/buddy: Fix alloc_range() error handling code
CVE-2024-26823 7.8 HIGH irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems
CVE-2024-26883 7.8 HIGH bpf: Fix stackmap overflow check on 32-bit arches
CVE-2024-26872 7.8 HIGH RDMA/srpt: Do not register event handler until srpt device is fully setup

Showing top 20 of 100 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-26898

No comments yet

Leave a comment