CVE-2024-42254

Summary

CVE-2024-42254: A vulnerability in the Linux kernel's io_uring subsystem has been addressed. The issue involved inconsistent error handling in io_alloc_pbuf_ring(), leading to a null pointer dereference. This could potentially result in a kernel crash or arbitrary code execution. The flaw was identified by Syz and was reported to affect the RIP at 0010:\__io_remove_buffers, located in io_uring/kbuf.c. The vulnerability was discovered during kernel address sanitizer (KASAN) testing and was found to impact versions up to the latest at the time of disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.