CVE-2024-46831CWE-416

CVE-2024-46831

High · published September 27, 2024

CVSS v3.1
8.4
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: microchip: vcap: Fix use-after-free error in kunit test

This is a clear use-after-free error. We remove it, and rely on checking

the return code of vcap_del_rule.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00242 · 14.5th percentile
Weakness
CWE-416 · Use After Free
Published
2024-09-27T17:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.2, < 6.6.516.6.51
linux/linux_kernel≥ 6.7, < 6.10.106.10.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/a3c1e45156ad39f225cd7ddae0f81230a3b1e657 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b0804c286ccfcf5f5c004d5bf8a54c0508b5e86b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f7fe95f40c85311c98913fe6ae2c56adb7f767a7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 27 SEP 12:39Z
    net: microchip: vcap: Fix use-after-free error in kunit test
    cvelistv5