Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2024-27395

UNKNOWN
Published 2024-05-09T16:37:15.196Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2024-27395. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: Fix Use-After-Free in ovs_ct_exit

Since kfree_rcu, which is called in the hlist_for_each_entry_rcu traversal
of ovs_ct_limit_exit, is not part of the RCU read critical section, it
is possible that the RCU grace period will pass during the traversal and
the key will be free.

To prevent this, it should be changed to hlist_for_each_entry_safe.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Linux

Linux

Affected Versions:

11efd5cb04a184eea4f57b68ea63dddd463158d1 11efd5cb04a184eea4f57b68ea63dddd463158d1 11efd5cb04a184eea4f57b68ea63dddd463158d1 11efd5cb04a184eea4f57b68ea63dddd463158d1 11efd5cb04a184eea4f57b68ea63dddd463158d1 11efd5cb04a184eea4f57b68ea63dddd463158d1 11efd5cb04a184eea4f57b68ea63dddd463158d1 11efd5cb04a184eea4f57b68ea63dddd463158d1
Linux

Linux

Affected Versions:

4.18 0 4.19.313 5.4.275 5.10.216 5.15.158 6.1.90 6.6.30 6.8.9 6.9

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-97fh-3x83-fvh6

Advisory Details

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix Use-After-Free in ovs_ct_exit Since kfree_rcu, which is called in the hlist_for_each_entry_rcu traversal of ovs_ct_limit_exit, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free. To prevent this, it should be changed to hlist_for_each_entry_safe.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-27395
WEB https://git.kernel.org/stable/c/2db9a8c0a01fa1c762c1e61a13c212c492752994
WEB https://git.kernel.org/stable/c/35880c3fa6f8fe281a19975d2992644588ca33d3
WEB https://git.kernel.org/stable/c/589523cf0b384164e445dd5db8d5b1bf97982424
WEB https://git.kernel.org/stable/c/5ea7b72d4fac2fdbc0425cd8f2ea33abe95235b2
WEB https://git.kernel.org/stable/c/9048616553c65e750d43846f225843ed745ec0d4
WEB https://git.kernel.org/stable/c/bca6fa2d9a9f560e6b89fd5190b05cc2f5d422c1
WEB https://git.kernel.org/stable/c/eaa5e164a2110d2fb9e16c8a29e4501882235137
WEB https://git.kernel.org/stable/c/edee0758747d7c219e29db9ed1d4eb33e8d32865
WEB https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
WEB https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

Advisory provided by GitHub Security Advisory Database. Published: May 14, 2024, Modified: January 14, 2025

References

https://git.kernel.org/stable/c/2db9a8c0a01fa1c762c1e61a13c212c492752994
https://git.kernel.org/stable/c/589523cf0b384164e445dd5db8d5b1bf97982424
https://git.kernel.org/stable/c/35880c3fa6f8fe281a19975d2992644588ca33d3
https://git.kernel.org/stable/c/9048616553c65e750d43846f225843ed745ec0d4
https://git.kernel.org/stable/c/bca6fa2d9a9f560e6b89fd5190b05cc2f5d422c1
https://git.kernel.org/stable/c/eaa5e164a2110d2fb9e16c8a29e4501882235137
https://git.kernel.org/stable/c/edee0758747d7c219e29db9ed1d4eb33e8d32865
https://git.kernel.org/stable/c/5ea7b72d4fac2fdbc0425cd8f2ea33abe95235b2
Published: 2024-05-09T16:37:15.196Z
Last Modified: 2025-05-04T09:04:04.943Z
Copied to clipboard!