CVE-2024-46858

Summary

CVE-2024-46858 is a Linux kernel vulnerability affecting the mptcp module. The issue stems from a race condition between two paths to the function mptcp_pm_del_add_timer. CPU1 calls net_rx_action and NF_HOOK, while CPU2 runs remove_anno_list_by_saddr. This race condition results in a use-after-free (UAF) vulnerability in mptcp_pm_del_add_timer on CPU1. To mitigate this issue, developers should keep a reference to add_timer inside the pm.lock, and call sk_stop_timer_sync() with this reference instead of "entry->add_timer." Additionally, list_del(&entry->list) should be moved to mptcp_pm_del_add_timer and executed within the pm lock, while avoiding direct access to any entry members outside the pm lock.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.