CVE-2024-56672

Summary

CVE-2024-56672 is a vulnerability in the Linux kernel that affects the blkcg subsystem. The issue lies in the function blkcg_unpin_online(), which can lead to a Use-After-Free (UAF) condition. This occurs because blkcg_unpin_online() calls blkcg_destroy_blkgs(blkcg) before obtaining the parent pointer, allowing the blkcg to be freed and resulting in a UAF. The vulnerability can potentially allow an attacker to corrupt kernel memory, leading to system instability or even a complete system compromise. The UAF is not trivial to exploit, as it requires bypassing RCU grace periods and a work item execution. The vulnerability has been resolved by reading the parent pointer before destroying the blkcg's blkg.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.