CVE-2024-56635

Summary

CVE-2024-56635 is a Linux kernel vulnerability that could lead to a Use-After-Free (UAF) issue in the function default_operstate(). This vulnerability was discovered by syzbot and occurs due to a race condition between device and netns dismantles. After the call to __rtnl_unlock(), it's not guaranteed that the netns for each device is still alive, potentially leading to UAF. The affected devices should not be in the NETREG_UNREGISTERED state, and an ASSERT_RTNL() should be added before the call to __dev_get_by_index(). This UAF issue was identified by the KASAN memory error detection tool and could result in a kernel stack dump and potential system instability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.