Lucene search

[email protected]CVE-2024-1312

HistoryFeb 08, 2024 - 1:15 p.m.

CVE-2024-1312

2024-02-0813:15:09

CWE-416

[email protected]

web.nvd.nist.gov

linux kernel

memory management

cve-2024-1312

use-after-free

system crash

security flaw

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

Low

1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:H/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

A use-after-free flaw was found in the Linux kernel’s Memory Management subsystem when a user wins two races at the same time with a fail in the mas_prev_slot function. This issue could allow a local user to crash the system.

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt6.5
linux:linux_kernellinux linux kerneleq2.6.31.14
linux:linux_kernellinux linux kerneleq4.4.251
linux:linux_kernellinux linux kerneleq2.6.32.33
linux:linux_kernellinux linux kerneleq4.4.83
linux:linux_kernellinux linux kerneleq4.4.247
linux:linux_kernellinux linux kerneleq4.1.17
linux:linux_kernellinux linux kerneleq4.14.149
linux:linux_kernellinux linux kerneleq3.2.96
linux:linux_kernellinux linux kerneleq4.19.21

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	6.5
linux:linux_kernel	linux linux kernel	eq	2.6.31.14
linux:linux_kernel	linux linux kernel	eq	4.4.251
linux:linux_kernel	linux linux kernel	eq	2.6.32.33
linux:linux_kernel	linux linux kernel	eq	4.4.83
linux:linux_kernel	linux linux kernel	eq	4.4.247
linux:linux_kernel	linux linux kernel	eq	4.1.17
linux:linux_kernel	linux linux kernel	eq	4.14.149
linux:linux_kernel	linux linux kernel	eq	3.2.96
linux:linux_kernel	linux linux kernel	eq	4.19.21

Rows per page:

1-10 of 45121

References

access.redhat.com/security/cve/CVE-2024-1312

bugzilla.redhat.com/show_bug.cgi?id=2225569

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/mm/memory.c?h=v6.8-rc3&id=657b5146955eba331e01b9a6ae89ce2e716ba306

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

Low

1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:H/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2024-1312

redhatcve1 prion1 cbl_mariner1 ubuntucve1 debiancve1 cvelist1