CVE-2024-50257

Summary

CVE-2024-50257: A use-after-free vulnerability was discovered in the Linux kernel's netfilter component, specifically in the ip6table_nat module. The issue arises when concurrently executing module unload and get_info() functions. The root cause is a race condition where the xt_table module is being removed from the system while get_info() is still trying to access its reference count, resulting in a use-after-free condition. The vulnerability can lead to memory corruption, potentially allowing an attacker to execute arbitrary code or cause a denial-of-service condition. Users are advised to update their Linux kernel to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.