CVE-2024-36972: Local privilege escalation in LTS 6.6.28, COS 109 17800.218.20 (kernelCTF)
Summary
CVE-2024-36972: In multiple functions of af_unix.c, there is a possible memory corruption due to a race condition. Affects :linux_kernel: versions >= :0, < :2024-09-05. Fixed in :2024-09-05. How to fix ↓
Also tracked for
- linux · Debian:12
The same CVE-2024-36972 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is the Linux Kernel in the Android ecosystem. The Linux Kernel is the core component of the Android operating system, responsible for managing system resources, providing device drivers, and facilitating communication between hardware and software. This vulnerability specifically impacts LTS 6.6.28 and COS 109 17800.218.20 (kernelCTF) versions.
Vulnerability Detail
The vulnerability resides in multiple functions of af_unix.c and is caused by a race condition, leading to possible memory corruption. Exploitation of this vulnerability can result in local escalation of privilege without requiring additional execution privileges. Notably, user interaction is not necessary for exploitation.
How To Fix
Minimum fixed version
:2024-09-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
In conclusion, the Linux Kernel in the Android ecosystem is vulnerable to a local privilege escalation vulnerability due to a race condition in multiple functions of af_unix.c. This vulnerability can be exploited without user interaction, potentially leading to unauthorized access and malicious activities. It is crucial to update the affected package to the fixed versions to mitigate this vulnerability.
See every vulnerability recorded for :linux_kernel: →
FAQ
This vulnerability allows an attacker to escalate their privileges locally, potentially gaining unauthorized access to sensitive information or performing malicious actions on the affected system.
No, user interaction is not needed for the successful exploitation of this vulnerability.
The vulnerability affects LTS 6.6.28 and COS 109 17800.218.20 (kernelCTF) versions of the Linux Kernel.
The recommended mitigation is to update the affected package to the fixed versions provided.
You can find more information about this vulnerability, including technical details and fixes, in the provided sources and references.
References
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
