CVE-2024-46738

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() When removing a resource from vmci_resource_table in vmci_resource_remove(), the search is performed using the resource handle by comparing context and resource fields. It is possible though to create two resources with different types but same handle (same context and resource fields). When trying to remove one of the resources, vmci_resource_remove() may not remove the intended one, but the object will still be freed as in the case of the datagram t...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= bc63dedb7d46a7d690c6b6edf69136b88af06cc6 < f6365931bf7c07b2b397dbb06a4f6573cc9fae73, >= bc63dedb7d46a7d690c6b6edf69136b88af06cc6 < b243d52b5f6f59f9d39e69b191fb3d58b94a43b1, >= bc63dedb7d46a7d690c6b6edf69136b88af06cc6 < 6c563a29857aa8053b67ee141191f69757f27f6e, >= bc63dedb7d46a7d690c6b6edf69136b88af06cc6 < ef5f4d0c5ee22d4f873116fec844ff6edaf3fa7d, >= bc63dedb7d46a7d690c6b6edf69136b88af06cc6 < b9efdf333174468651be40390cbc79c9f55d9cce, >= bc63dedb7d46a7d690c6b6edf69136b88af06cc6 < 39e7e593418ccdbd151f2925fa6be1a616d16c96, >= bc63dedb7d46a7d690c6b6edf69136b88af06cc6 < 00fe5292f081f8d773e572df8e03bf6e1855fe49, >= bc63dedb7d46a7d690c6b6edf69136b88af06cc6 < 48b9a8dabcc3cf5f961b2ebcd8933bf9204babb7, >= 3.9, >= 3.9 < 4.19.322, >= 4.20 < 5.4.284, >= 5.5 < 5.10.226, >= 5.11 < 5.15.167, >= 5.16 < 6.1.110, >= 6.2 < 6.6.51, >= 6.7 < 6.10.10, 6.11

Fixed versions

4.19.322, 5.4.284, 5.10.226, 5.15.167, 6.1.110, 6.6.51, 6.10.10

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416