CVE-2024-27418

MEDIUM

Linux Kernel 5.15-6.1.80, 6.2.0-6.6.20, 6.7.0-6.7.8 - Use-After-Free in MCTP Local Output

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: net: mctp: take ownership of skb in mctp_local_output Currently, mctp_local_output only takes ownership of skb on success, and we may leak an skb if mctp_local_output fails in specific states; the skb ownership isn't transferred until the actual output routing occurs. Instead, make mctp_local_output free the skb on all error paths up to the route action, so it always consumes the passed skb.

References (4)

Core 4

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 12.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (15)
linux/Kernel 5.15.0 - 6.1.81linux
linux/Kernel 6.2.0 - 6.6.21linux
linux/Kernel 6.7.0 - 6.7.9linux
Linux/Linux < 5.15
Linux/Linux 5.15
Linux/Linux 6.1.81 - 6.1.*
Linux/Linux 6.6.21 - 6.6.*
Linux/Linux 6.7.9 - 6.7.*
Linux/Linux 6.8
Linux/Linux 833ef3b91de692ef33b800bca6b1569c39dece74 - 3773d65ae5154ed7df404b050fd7387a36ab5ef3
... and 5 more
Published May 17, 2024
Tracked Since Feb 18, 2026