CVE-2024-53168

Summary

CVE-2024-53168 is a vulnerability impacting the Linux kernel that involves a use-after-free (UAF) issue in the sunrpc module. Specifically, there is a UAF in tcp_write_timer_handler, leading to a kernel stack corruption. The root cause is that when a TCP socket in a network namespace is closed and its FIN message is discarded, the nfsd side continues to send retransmission messages, causing the network namespace to be deleted before the socket's net structure is properly handled, resulting in the UAF. As a temporary solution, holding the netns refcnt for the tcp kernel socket is suggested to prevent this issue. A proper fix is forthcoming.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.