CVE-2024-56693

Summary

CVE-2024-56693 is a Linux kernel vulnerability that affects the brd module. My colleague Wupeng discovered that during fault injection, the brd_init function was creating disks before successfully registering them with the kernel, leading to a use-after-free (UAF) condition. Specifically, the bdev_release function was being called on a disk before it was fully initialized, resulting in a memory leak and subsequent UAF when the disk was later released. This issue can be exploited to cause a denial of service or potentially gain unauthorized access to system resources. To mitigate the vulnerability, it is recommended to follow the behavior of the loop_init function and reintroduce the brd_devices_mutex to help serialize modifications to the brd_list.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.