CVE-2024-36886

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN: slab-use-after-free in kfree_skb_list_reason+0x47e/0x4c0 linux/net/core/skbuff.c:1183 Read of size 8 at addr ffff88804d2a7c80 by task poc/8034 CPU: 1 PID: 8034 Comm: poc Not tainted 6.8.2 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014 Call Trace: <IRQ> __dump_stack linux/lib/dump_stack.c:88 dump_stack_lvl+0xd9/0x1b0 linux/l...

Affected product and versions

Product

Linux Linux, linux_kernel, linux kernel

Affected versions

>= 1149557d64c97dc9adf3103347a1c0e8c06d3b89 < e19ec8ab0e25bc4803d7cc91c84e84532e2781bd, >= 1149557d64c97dc9adf3103347a1c0e8c06d3b89 < 93bc2d6d16f2c3178736ba6b845b30475856dc40, >= 1149557d64c97dc9adf3103347a1c0e8c06d3b89 < 367766ff9e407f8a68409b7ce4dc4d5a72afeab1, >= 1149557d64c97dc9adf3103347a1c0e8c06d3b89 < 66116556076f0b96bc1aa9844008c743c8c67684, >= 1149557d64c97dc9adf3103347a1c0e8c06d3b89 < 21ea04aad8a0839b4ec27ef1691ca480620e8e14, >= 1149557d64c97dc9adf3103347a1c0e8c06d3b89 < ffd4917c1edb3c3ff334fce3704fbe9c39f35682, >= 1149557d64c97dc9adf3103347a1c0e8c06d3b89 < a0fbb26f8247e326a320e2cb4395bfb234332c90, >= 1149557d64c97dc9adf3103347a1c0e8c06d3b89 < 080cbb890286cd794f1ee788bbc5463e2deb7c2b, >= 4.1, >= 1149557d64c9 < e19ec8ab0e25, >= 1149557d64c9 < 93bc2d6d16f2, >= 1149557d64c9 < 367766ff9e40, >= 1149557d64c9 < 66116556076f, >= 1149557d64c9 < 21ea04aad8a0, >= 1149557d64c9 < ffd4917c1edb, >= 1149557d64c9 < a0fbb26f8247, >= 1149557d64c9 < 080cbb890286, >= 4.1 < 4.19.314, >= 4.20 < 5.4.276, >= 5.5 < 5.10.217

Fixed versions

4.19.314, 5.4.276, 5.10.217, 5.15.159, 6.1.91, 6.6.31, 6.8.10

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416