Skip to content
OpenAdvisories

Archive

31 August 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.8
    CVE-2024-44946 Public exploit

    kcm: Serialise kcm_sendmsg() for the same socket.

    In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release(). [0] The scenario is 1. Thread A builds a skb with MSG_MORE and sets kcm->seq_skb. 2. Thread A resume…