CVE-2024-40909

HIGH EPSS 19.5%
Published Jul 12, 20241y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Jul 12, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc afterward, which leads to a use-after-free as reported by syzbot. Actually, one of them should be sufficient, so just call one of them instead of both. Also add a WARN_ON() in case of any problematic implementation.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
19.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 4

VendorProductVersionRange
linuxlinux_kernel*≥6.6.26  –  <6.6.35
linuxlinux_kernel*≥6.9  –  <6.9.6
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/2884dc7d08d98a89d8d65121524bb7533183a63a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/91cff53136daeff50816b0baeafd38a6976f6209
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fa97b8fed9896f1e89cb657513e483a152d4c382
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2884dc7d08d98a89d8d65121524bb7533183a63a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/91cff53136daeff50816b0baeafd38a6976f6209
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fa97b8fed9896f1e89cb657513e483a152d4c382
    Patch