CVE - CVE-2024-53206

CVE-ID
CVE-2024-53206	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler(). Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout). Let's pass oreq to reqsk_put().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2dcc86fefe09ac853158afd96b60d544af115dc5 URL:https://git.kernel.org/stable/c/2dcc86fefe09ac853158afd96b60d544af115dc5 MISC:https://git.kernel.org/stable/c/65ed89cad1f57034c256b016e89e8c0a4ec7c65b URL:https://git.kernel.org/stable/c/65ed89cad1f57034c256b016e89e8c0a4ec7c65b MISC:https://git.kernel.org/stable/c/6d845028609a4af0ad66f499ee0bd5789122b067 URL:https://git.kernel.org/stable/c/6d845028609a4af0ad66f499ee0bd5789122b067 MISC:https://git.kernel.org/stable/c/9a3c1ad93e6fba67b3a637cfa95a57a6685e4908 URL:https://git.kernel.org/stable/c/9a3c1ad93e6fba67b3a637cfa95a57a6685e4908 MISC:https://git.kernel.org/stable/c/c31e72d021db2714df03df6c42855a1db592716c URL:https://git.kernel.org/stable/c/c31e72d021db2714df03df6c42855a1db592716c MISC:https://git.kernel.org/stable/c/d0eb14cb8c08b00c36a3d5dc57a6f428b301f721 URL:https://git.kernel.org/stable/c/d0eb14cb8c08b00c36a3d5dc57a6f428b301f721
Assigning CNA
kernel.org
Date Record Created
20241119	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241119)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)