CVE-2024-53210

Summary

CVE-2024-53210 is a vulnerability in the Linux kernel's iucv subsystem. Passing the MSG_PEEK flag to skb_recv_datagram() results in a memory leak due to the sk_buff refcount not being decremented upon exit. This issue can lead to a WARN_ON during socket close and potential memory leaks. The vulnerability was discovered during testing of the afiucv_test_msg application and affects kernel version 6.10.0-rc7. To mitigate this issue, the skb refcount should be decreased by one if MSG_PEEK is set to prevent memory leaks and WARN_ON. The affected code can be found in iucv_sock_destruct() in the af_iucv file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.