SECUFOCUSNOW
Home›CVE index›CVE-2024-44934
Review reviewHigh

CVE-2024-44934

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port syzbot hit a use-after-free[1] which is caused because the bridge doesn't make sure that all previous garbage has been collected when removing a port. What happens is: CPU 1 CPU 2 start gc cycle remove port acquire gc lock first wait for lock call br_multicasg_gc() directly acquire lock now but free port the port can be freed while grp timers still running Make sure all previous gc cycles have finished by using flush_work before freeing the port. [1] BUG: KA...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.08.26
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port syzbot hit a use-after-free[1] which is caused because the bridge doesn't make sure that all previous garbage has been collected when removing a port. What happens is: CPU 1 CPU 2 start gc cycle remove port acquire gc lock first wait for lock call br_multicasg_gc() directly acquire lock now but free port the port can be freed while grp timers still running Make sure all previous gc cycles have finished by using flush_work before freeing the port. [1] BUG: KA...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= e12cec65b5546f19217e26aafb8add6e2fadca18 < 1e16828020c674b3be85f52685e8b80f9008f50f, >= e12cec65b5546f19217e26aafb8add6e2fadca18 < 0d8b26e10e680c01522d7cc14abe04c3265a928f, >= e12cec65b5546f19217e26aafb8add6e2fadca18 < e3145ca904fa8dbfd1a5bf0187905bc117b0efce, >= e12cec65b5546f19217e26aafb8add6e2fadca18 < b2f794b168cf560682ff976b255aa6d29d14a658, >= e12cec65b5546f19217e26aafb8add6e2fadca18 < 92c4ee25208d0f35dafc3213cdf355fbe449e078, >= 5.10, >= 5.10 < 5.15.165, >= 5.16 < 6.1.105, >= 6.2 < 6.6.46, >= 6.7 < 6.10.5, 6.11
Fixed versions
5.15.165, 6.1.105, 6.6.46, 6.10.5

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416