Linux kernel Heap Buffer Overflow DoS

The vulnerability of the kcmrelease function in the net/kcm/kcmsock.c module, which implements networking functions for the Linux operating system’s kernel, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service...

CVE-2024-44946

In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcmsendmsg for the same socket. syzkaller reported UAF in kcmrelease. 0 The scenario is 1. Thread A builds a skb with MSGMORE and sets kcm-seqskb. 2. Thread A resumes building skb from kcm-seqskb but is blocked by...