CVE-2024-34748

Summary

CVE-2024-34748 is a newly disclosed vulnerability affecting the kernel of certain devices. In the _DevmemXReservationPageAddress function of devicemem_server.c, a use-after-free condition can occur due to an improper casting. This issue, if exploited, allows for local privilege escalation in the kernel without requiring any additional execution privileges. Notably, user interaction is not a prerequisite for successful exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.