PT-2024-27023

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The Linux kernel has a vulnerability that allows the socket state check at accept time to be relaxed. This issue was reported by Christoph and is caused by the reproducer invoking shutdown befo...

kernel: Double free in the inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c

The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel allows attackers to cause a denial of service double free or possibly have unspecified other impact by leveraging use of the accept system call. An unprivileged local user could use this flaw to induce kernel memor...