The vulnerability of the kcm_sendmsg() function in the implementation of the KCM (Kernel Connection Multiplexer) for Linux kernel sockets allows a attacker to cause a service failure.

🗓️ 23 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

KCM kcm_sendmsg vulnerability allows service failure due to reuse of freed memory from concurrent access.

Reporter	Title	Published	Views	Family All 202
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-713)	16 Sep 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-779)	11 Dec 202400:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: kernel (CVE-2024-44946)	10 Feb 202500:00	–	nessus
Tenable Nessus	Debian dla-3912 : ata-modules-5.10.0-29-armmp-di - security update	7 Oct 202400:00	–	nessus
Tenable Nessus	Debian dla-4008 : linux-config-6.1 - security update	3 Jan 202500:00	–	nessus
Tenable Nessus	Debian dsa-5782 : affs-modules-6.1.0-21-4kc-malta-di - security update	3 Oct 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: kernel (CVE-2024-44946)	13 Oct 202400:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0084)	9 Jun 202500:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)	25 Jul 202500:00	–	nessus
Tenable Nessus	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12813)	13 Nov 202400:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/00425508f30baa5ab6449a1f478480ca7cffa6da
git	www.git.kernel.org/stable/c/6633b17840bf828921254d788ccd15602843fe9b
git	www.git.kernel.org/stable/c/72da240aafb142630cf16adc803ccdacb3780849
git	www.git.kernel.org/stable/c/807067bf014d4a3ae2cc55bd3de16f22a01eb580
git	www.git.kernel.org/stable/c/8c9cdbf600143bd6835c8b8351e5ac956da79aec
git	www.git.kernel.org/stable/c/9c8d544ed619f704e2b70e63e08ab75630c2ea23
git	www.git.kernel.org/stable/c/eb06c8d3022ce6738711191c89f9b3e9cfb91914
git	www.git.kernel.org/stable/c/fa6c23fe6dcac8c8bd63920ee8681292a2bd544e
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2024083150-CVE-2024-44946-9cf1@gregkh/

06 May 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.6

CVSS 35.5

EPSS0.00824

Kernel connection multiplexer Use after free Freed memory reuse Concurrent access Kernel sockets