SecuriTricks - CVE-2024-56764

Description

In the Linux kernel, the following vulnerability has been resolved: ublk: detach gendisk from ublk device if add_disk() fails Inside ublk_abort_requests(), gendisk is grabbed for aborting all inflight requests. And ublk_abort_requests() is called when exiting the uring context or handling timeout. If add_disk() fails, the gendisk may have been freed when calling ublk_abort_requests(), so use-after-free can be caused when getting disk's reference in ublk_abort_requests(). Fixes the bug by detaching gendisk from ublk device if add_disk() fails.

Product(s) Impacted

Vendor	Product	Versions
Linux	Linux Kernel	*, 6.13

Weaknesses

CWE-416

Use After Free

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

*CPE(s)

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	6.13	rc1	/	/	/	/	/	/
o	linux	linux_kernel	6.13	rc2	/	/	/	/	/	/
o	linux	linux_kernel	6.13	rc3	/	/	/	/	/	/
o	linux	linux_kernel	6.13	rc4	/	/	/	/	/	/

References

https://git.kernel.org/stable/c/75cd4005da5492129917a4a4ee45e81660556104

https://git.kernel.org/stable/c/7d680f2f76a3417fdfc3946da7471e81464f7b41

CVSS Score

7.8 / 10

CVSS Data

Attack Vector: LOCAL
Attack Complexity: LOW
Privileges Required: LOW
Scope: UNCHANGED
Confidentiality Impact: HIGH
Integrity Impact: HIGH
Availability Impact: HIGH

View Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Date

Published: Jan. 6, 2025, 5:15 p.m.
Last Modified: Jan. 7, 2025, 11:04 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVE-2024-56764