ID:11206 - Exploit for Use-after-free in Linux kernel - CVE-2024-27398

 
Main Vulnerability Database Exploits ID:11206 - Exploit for Use-after-free in Linux kernel - CVE-2024-27398

ID:11206 - Exploit for Use-after-free in Linux kernel - CVE-2024-27398

Published: March 14, 2025


Vulnerability identifier: #VU89672
Vulnerability risk: Medium
CVE-ID: CVE-2024-27398
CWE-ID: CWE-416
Exploitation vector: Adjecent network
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the sco_sock_timeout() function in net/bluetooth/sco.c. A remote attacker can trigger a use-after-free error and perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.