Use-after-free in Linux kernel

1) Use-after-free

EUVDB-ID: #VU105393

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58060

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the btf_type_is_void() function in kernel/bpf/btf.c, within the bpf_struct_ops_desc_release() and bpf_struct_ops_desc_init() functions in kernel/bpf/bpf_struct_ops.c. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 6.12 - 6.12.12

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:6.12:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.6:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.7:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.8:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.12.9:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/2324fb4e92092837ee278fdd8d60c48ee1a619ce
https://git.kernel.org/stable/c/96ea081ed52bf077cad6d00153b6fba68e510767
https://git.kernel.org/stable/c/b777b14c2a4a4e2322daf8e8ffd42d2b88831b17
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.13

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.