CVE-2024-26754

Summary

CVE-2024-26754 is a vulnerability in the Linux kernel that affects the gtp subsystem. The issue, which was identified through syzkaller, involves a use-after-free and null-ptr dereference in the gtp_genl_dump_pdp() function. The gtp_net_ops pernet operations structure for the subsystem must be registered before registering the generic netlink family to prevent this vulnerability. A general protection fault occurred in gtp_genl_dump_pdp, likely due to a non-canonical address. The vulnerability allows an attacker to potentially execute arbitrary code or cause a denial of service. The affected Linux kernel versions are not specified in the provided information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.