Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2024-26739

UNKNOWN
Published 2024-04-03T17:00:24.879Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2024-26739. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_mirred: don't override retval if we already lost the skb

If we're redirecting the skb, and haven't called tcf_mirred_forward(),
yet, we need to tell the core to drop the skb by setting the retcode
to SHOT. If we have called tcf_mirred_forward(), however, the skb
is out of our hands and returning SHOT will lead to UaF.

Move the retval override to the error path which actually need it.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Linux

Linux

Affected Versions:

e5cf1baf92cb785b90390db1c624948e70c8b8bd e5cf1baf92cb785b90390db1c624948e70c8b8bd e5cf1baf92cb785b90390db1c624948e70c8b8bd e5cf1baf92cb785b90390db1c624948e70c8b8bd e5cf1baf92cb785b90390db1c624948e70c8b8bd e5cf1baf92cb785b90390db1c624948e70c8b8bd
Linux

Linux

Affected Versions:

4.19 0 5.10.238 5.15.182 6.1.136 6.6.19 6.7.7 6.8

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-rwch-8cp4-7v7r

Advisory Details

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have called tcf_mirred_forward(), however, the skb is out of our hands and returning SHOT will lead to UaF. Move the retval override to the error path which actually need it.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-26739
WEB https://git.kernel.org/stable/c/0117fe0a4615a7c8d30d6ebcbf87332fbe63e6fd
WEB https://git.kernel.org/stable/c/166c2c8a6a4dc2e4ceba9e10cfe81c3e469e3210
WEB https://git.kernel.org/stable/c/28cdbbd38a4413b8eff53399b3f872fd4e80db9d
WEB https://git.kernel.org/stable/c/9d3ef89b6a5e9f2e940de2cef3d543be0be8dec5
WEB https://git.kernel.org/stable/c/e873e8f7d03a2ee5b77fb1a305c782fed98e2754
WEB https://git.kernel.org/stable/c/f4e294bbdca8ac8757db436fc82214f3882fc7e7

Advisory provided by GitHub Security Advisory Database. Published: April 3, 2024, Modified: June 4, 2025

References

https://git.kernel.org/stable/c/0117fe0a4615a7c8d30d6ebcbf87332fbe63e6fd
https://git.kernel.org/stable/c/9d3ef89b6a5e9f2e940de2cef3d543be0be8dec5
https://git.kernel.org/stable/c/e873e8f7d03a2ee5b77fb1a305c782fed98e2754
https://git.kernel.org/stable/c/28cdbbd38a4413b8eff53399b3f872fd4e80db9d
https://git.kernel.org/stable/c/f4e294bbdca8ac8757db436fc82214f3882fc7e7
https://git.kernel.org/stable/c/166c2c8a6a4dc2e4ceba9e10cfe81c3e469e3210
Published: 2024-04-03T17:00:24.879Z
Last Modified: 2025-06-04T12:57:14.045Z
Copied to clipboard!