CVE-2024-36971

Summary

CVE-2024-36971 is a vulnerability affecting the Linux kernel. It involves the function __dst_negative_advice(), which does not adhere to the proper RCU rules when clearing sk->dst_cache. This can result in a Use-After-Free (UAF) vulnerability. The correct sequence of actions should be to first clear sk->sk_dst_cache and then call dst_release(old_dst). However, in __dst_negative_advice(), the order is reversed. Consequently, all three existing ->negative_advice() methods need to perform the sk_dst_reset(sk) themselves. This vulnerability became apparent after a specific commit and was discovered by Clement Lecigne. It's essential to note that UDP sockets can exploit this flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.