CVE-2024-26739: linux-libc-dev - net/sched: act_mirred vulnerability
Summary
CVE-2024-26739: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we n... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package that provides the Linux kernel headers for development purposes. It contains the necessary files and definitions to compile and build kernel modules. This package is commonly used by developers to create and modify kernel-related software. The vulnerability in question affects the net/sched module of the Linux kernel, specifically the act_mirred function.
Vulnerability Detail
The act_mirred function in the net/sched module of the Linux kernel is vulnerable to a specific issue. When redirecting a socket buffer (skb) and not yet calling tcf_mirred_forward(), the function needs to set the retcode to SHOT to indicate that the skb should be dropped. However, if tcf_mirred_forward() has already been called, setting the retcode to SHOT can lead to a Use-after-Free (UaF) vulnerability. This vulnerability can potentially be exploited by an attacker to execute arbitrary code or cause a denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The linux-libc-dev package is vulnerable to a Use-after-Free (UaF) issue in the act_mirred function of the net/sched module. To mitigate this vulnerability, it is crucial to update the package to a patched version and keep the system's kernel up to date. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package that provides the Linux kernel headers for development purposes. It is used by developers to compile and build kernel-related software.
The net/sched module is a part of the Linux kernel that handles network traffic scheduling and shaping. It provides functionality for traffic control and quality of service (QoS) management.
This vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial of service by exploiting the Use-after-Free (UaF) issue in the act_mirred function.
To fix this vulnerability, update the linux-libc-dev package to a patched version. Make sure to keep the system's kernel up to date with the latest security patches as well.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
