Heimdall Security Logo

CVE-2024-39503

Vulnérabilité élevée dans Linux (Linux)

CVSS 7.8 · Élevée
EPSS 0.2%
Linux•Linux•Versions : <c0761d1f1ce1d5b85b5e82bbb714df12de1aa8c3, 6.6.18, <=6.1.*, 5.4.279, 6.10, 970709a67696b100a57b33af1a3d75fc34b747eb, 6.1.95, <5.10.221, 0, c7f2733e5011bfd136f1ca93497394d43aa76225, <390b353d1a1da3e9c6c0fd14fe650d69063c95d6, 6.9.6, <6.1.95, 6.8, <6.8, 6.6.35, <=5.10.*, <=6.6.*, <=6.9.*, 97f7cf1cd80eeed3b7c808b7c12463295c751001, b93a6756a01f4fd2f329a39216f9824c56a66397, <4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10, <93b53c202b51a69e42ca57f5a183f7e008e19f83, 5.15.149, 5.15.162, <=5.4.*, <6.6.35, 5.10.221, <5.15.162, <5.4.279, 5.4.269, 6.1.79, <90ae20d47de602198eb69e6cd7a3db3420abfc08, 5.10.210, 6.7.6, a24d5f2ac8ef702a58e55ec276aad29b4bd97e05, 653bc5e6d9995d7d5f497c665b321875a626161c, <0f1bb77c6d837c9513943bc7c08f04c5cc5c6568, <=*, <=5.15.*, <2ba35b37f780c6410bb4bba9c3072596d8576702, c2dc077d8f722a1c73a24e674f925602ee5ece49

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ackermann reported that there is a race condition between namespace cleanup in ipset and the garbage collection of the list:set type. The namespace cleanup can destroy the list:set type of sets while the gc of the set type is waiting to run in rcu cleanup. The latter uses data from the destroyed set which thus leads use after free. The patch contains the following parts: - When destroying all sets, first remove the garbage collectors, then wait if needed and then destroy the sets. - Fix the badly ordered "wait then remove gc" for the destroy a single set case. - Fix the missing rcu locking in the list:set type in the userspace test case. - Use proper RCU list handlings in the list:set type. The patch depends on c1193d9bbbd3 (netfilter: ipset: Add list flush to cancel_gc).

Gravité et risque d'exploitation

CVE-2024-39503 obtient un score CVSS de 7.8/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.22 %, ce qui la place devant 11.9 % des CVE référencées.

Que faire ?

  • Vérifiez si Linux (versions <c0761d1f1ce1d5b85b5e82bbb714df12de1aa8c3, 6.6.18, <=6.1.*, 5.4.279, 6.10, 970709a67696b100a57b33af1a3d75fc34b747eb, 6.1.95, <5.10.221, 0, c7f2733e5011bfd136f1ca93497394d43aa76225, <390b353d1a1da3e9c6c0fd14fe650d69063c95d6, 6.9.6, <6.1.95, 6.8, <6.8, 6.6.35, <=5.10.*, <=6.6.*, <=6.9.*, 97f7cf1cd80eeed3b7c808b7c12463295c751001, b93a6756a01f4fd2f329a39216f9824c56a66397, <4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10, <93b53c202b51a69e42ca57f5a183f7e008e19f83, 5.15.149, 5.15.162, <=5.4.*, <6.6.35, 5.10.221, <5.15.162, <5.4.279, 5.4.269, 6.1.79, <90ae20d47de602198eb69e6cd7a3db3420abfc08, 5.10.210, 6.7.6, a24d5f2ac8ef702a58e55ec276aad29b4bd97e05, 653bc5e6d9995d7d5f497c665b321875a626161c, <0f1bb77c6d837c9513943bc7c08f04c5cc5c6568, <=*, <=5.15.*, <2ba35b37f780c6410bb4bba9c3072596d8576702, c2dc077d8f722a1c73a24e674f925602ee5ece49) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE