In multiple locations, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-35970US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Clear stale u->oob_skb.
syzkaller started to report deadlock of unix_gc_lock after commit
4090fa373f0… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://android.googlesource.com/kernel/common/+/0c40a05117a289a0eac810a0df93f69b689343dcFIX
- https://android.googlesource.com/kernel/common/+/11d208f893526b9847dfedce65237fa185c2b7fdFIX
- https://android.googlesource.com/kernel/common/+/16dca90335394c7e118628afd6d7003b44274a22FIX
- https://android.googlesource.com/kernel/common/+/1e4d62adebcd635f86ce151e56f47952216f81bfFIX
- https://android.googlesource.com/kernel/common/+/250c362acdf831214f4e4c58c864b65eccb72d86FIX
- https://android.googlesource.com/kernel/common/+/279ed20d5fd4efc7b0436806a6a6c8293c9023afFIX
- https://android.googlesource.com/kernel/common/+/328840c93bd6a4871dd10908d01b41eab83eb8e2FIX
- https://android.googlesource.com/kernel/common/+/476cb9bc9b615a99bf4824b8fc5d74bed7e190bdFIX
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan