CVE-2024-34747
CVSS 3.1 Score 8.4 of 10 (high)
Details
Published Nov 13, 2024
Updated: Nov 15, 2024
CWE ID 416
Summary
CVE-2024-34747 is a recently disclosed vulnerability affecting the DevmemXIntMapPages function in devicemem_server.c. The issue stems from a logic error in the code, which results in a possible use-after-free scenario. This vulnerability allows for local privilege escalation within the kernel, granting attackers elevated system access without the need for additional execution privileges. User interaction is not required to exploit this vulnerability, making it a significant potential security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.