CVE-2024-47659

Summary

CVE-2024-47659 is a vulnerability impacting the Linux kernel's Smack security module. Incorrect labeling of incoming tcp/ipv4 connections has been identified, where the label of the incoming connection is mirrored in the returned packets. This results in unauthorized write access for the labeled entity, as the returned packets carry the label of the connecting entity instead of the intended label. This behavior, first observed in release 2.6.29.4, seems unintentional, as no explanation was provided. To mitigate this issue, returned packets now carry the intended label instead of the connecting entity's label.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.