Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-46831

Опубликовано: 27 сент. 2024
Источник: redhat
CVSS3: 7.8
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-free error. We remove it, and rely on checking the return code of vcap_del_rule.

A flaw was found in the Linux kernel's net/microchip/vcap component. This vulnerability is a use-after-free error, which occurs when a program attempts to use memory after it has been freed. A local attacker could potentially exploit this flaw to achieve privilege escalation or execute arbitrary code within the kernel, leading to a complete compromise of the system.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=2315183kernel: net: microchip: vcap: Fix use-after-free error in kunit test

EPSS

Процентиль: 16%
0.00242
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-free error. We remove it, and rely on checking the return code of vcap_del_rule.

CVSS3: 7.8
nvd
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-free error. We remove it, and rely on checking the return code of vcap_del_rule.

CVSS3: 7.8
msrc
9 месяцев назад

net: microchip: vcap: Fix use-after-free error in kunit test

CVSS3: 7.8
debian
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 7.8
github
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-free error. We remove it, and rely on checking the return code of vcap_del_rule.

EPSS

Процентиль: 16%
0.00242
Низкий

7.8 High

CVSS3

Уязвимость CVE-2024-46831 в Red Hat CVE — exploitDog