2 matches found
CVE-2024-26689 ceph: prevent use-after-free in encode_cap_msg()
In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...
8.8CVSS5.9AI score
SaveExploits0References10
PT-2024-3349
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a "use after free" error in the encode cap msg function, which is called by send cap and ceph check caps after calling prep cap. This error occurs due to a race...
8.8CVSS6.1AI score0.00702EPSS
SaveExploits0
20