CVE-2024-39503

linux kernel

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-39503

Katalog CVE

CVSS 7.0 · High EPSS 0,22%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ackermann reported that there is a race condition between namespace cleanup in ipset and the garbage collection of the list:set type. The namespace cleanup can destroy the list:set type of sets while the gc of the set type is waiting to run in rcu cleanup. The latter uses data from the destroyed set which thus leads use after free. The patch contains the following parts: - When destroying all sets, first remove the garbage collectors, then wait if needed and then destroy the sets. - Fix the badly ordered "wait then remove gc" for the destroy a single set case. - Fix the missing rcu locking in the list:set type in the userspace test case. - Use proper RCU list handlings in the list:set type. The patch depends on c1193d9bbbd3 (netfilter: ipset: Add list flush to cancel_gc).

Rincian

Terbit di NVD
12 Juli 2024
Terakhir diubah
4 Agustus 2026
Status NVD
Modified
CVSS 3.1
7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-416: Use After Free
EPSS (30 hari)
0,22% peluang dieksploitasi; lebih tinggi dari 11,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
linux linux kernel Versi 5.4.269 hingga sebelum 5.4.279
linux linux kernel Versi 5.10.210 hingga sebelum 5.10.221
linux linux kernel Versi 5.15.149 hingga sebelum 5.15.162
linux linux kernel Versi 6.1.79 hingga sebelum 6.1.95
linux linux kernel Versi 6.6.18 hingga sebelum 6.6.35
linux linux kernel Versi 6.7.6 hingga sebelum 6.8
linux linux kernel Versi 6.8.1 hingga sebelum 6.9.6
linux linux kernel Versi 6.8
linux linux kernel Versi 6.8 rc3
linux linux kernel Versi 6.8 rc4
linux linux kernel Versi 6.8 rc5
linux linux kernel Versi 6.8 rc6
linux linux kernel Versi 6.8 rc7
linux linux kernel Versi 6.10 rc1
linux linux kernel Versi 6.10 rc2
linux linux kernel Versi 6.10 rc3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.