Critical UAF Vulnerability in Linux Kernel Package: linux - CVE-2024-53168
Summary
DEBIAN-CVE-2024-53168: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket BUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0 Read of size 1 at ad... Affects linux versions < 6.12.3-1. Fixed in 6.12.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential services such as process management, memory management, and device control. The kernel is highly modular, allowing for various functionalities to be added or removed as needed. However, vulnerabilities can arise, such as the one identified in CVE-2024-53168, which poses a significant risk to system stability and security.
Vulnerability Detail
CVE-2024-53168 is a use-after-free (UAF) vulnerability in the sunrpc component of the Linux kernel. It occurs due to improper handling of TCP sockets, leading to potential exploitation by attackers. The vulnerability can result in arbitrary code execution or system crashes, as the kernel may attempt to access freed memory. This issue was introduced in version 0 and has been fixed in version 6.12.3-1. The vulnerability is particularly concerning as it can be triggered under specific network conditions, making it a critical security risk for systems relying on NFS (Network File System).
How To Fix
Minimum fixed version
6.12.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, it is advisable to limit exposure to untrusted networks and monitor network activity to mitigate potential risks until the patch is applied.
Conclusion
CVE-2024-53168 is a critical vulnerability in the Linux kernel that can lead to severe security risks. It is crucial for users to update their systems to the patched version to mitigate these risks. Regular monitoring and proactive measures can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
CVE-2024-53168 is a use-after-free vulnerability in the Linux kernel's sunrpc component, which can lead to arbitrary code execution or system crashes.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring any signup.
The risks include potential arbitrary code execution, system crashes, and exploitation by attackers, particularly in systems using NFS.
Run the command 'sudo apt update && sudo apt upgrade linux' in your terminal to update to the patched version 6.12.3-1.
Currently, there are no specific workarounds available. It is recommended to apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
