Medium WID-SEC-2024-0329 1 CVE

Linux Kernel: Schwachstelle ermöglicht Denial of Service

Published Feb 8, 2024 · Updated Feb 8, 2024 · de-DE

Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 1

Medium 5.1

CVE-2024-1312

Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu

A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same time with a fail in the mas_prev_slot function. This issue could allow a local user to crash the system.

Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux

Feb 8, 2024

Revision history

2024-02-08 #1
Initiale Fassung

References

GitHub Security Advisory vom 2024-02-08
https://github.com/advisories/GHSA-798f-8qgx-h85f