Spoofing

🗓️ 27 Feb 2024 10:15:00Reported by PRIOn knowledge baseType

Resolved Linux kernel vulnerability in tw_timer_handler related to use-after-free, causing real world panic issue and use-after-free on net->mib.net_statistics in tw_timer_handler. Fix involves reordering tcp_sk_ops and ipv4_mib_ops and replacing pr_crit() with panic().

Reporter	Title	Published	Views	Family All 165
ATTACKERKB	CVE-2021-46936	27 Feb 202410:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2022-1749)	7 Feb 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-009)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-021)	2 May 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-1937)	16 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-1964)	16 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2024-2038)	22 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : kernel (EulerOS-SA-2024-2070)	6 Aug 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2024-2476)	24 Sep 202400:00	–	nessus
Tenable Nessus	MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.1.el7.AXS7 (AXSA:2024-8651:24)	20 Jan 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/15579e1301f856ad9385d720c9267c11032a5022
git	www.git.kernel.org/stable/c/e73164e89d1be561228a4534e1091369ee4ba41a
git	www.git.kernel.org/stable/c/5c2fe20ad37ff56070ae0acb34152333976929b4
git	www.git.kernel.org/stable/c/a8e1944b44f94f5c5f530e434c5eaee787254566
git	www.git.kernel.org/stable/c/fe5838c22b986c1190f1dce9aa09bf6a491c1a69
git	www.git.kernel.org/stable/c/2386e81a1d277f540e1285565c9d41d531bb69d4
git	www.git.kernel.org/stable/c/08eacbd141e2495d2fcdde84358a06c4f95cbb13
git	www.git.kernel.org/stable/c/e22e45fc9e41bf9fcc1e92cfb78eb92786728ef0

27 Feb 2024 14:19Current

7.2High risk

Vulners AI Score7.2

EPSS0.00015