Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of tcxent...

CVE-2024-41010

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcxentry Pedro Pinto and later independently also Hyunwoo Kim and Wongi Lee reported an issue that the tcxentry can be released too early leading to a use after free UAF when an active old-style...

DEBIAN-CVE-2024-41010

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcxentry Pedro Pinto and later independently also Hyunwoo Kim and Wongi Lee reported an issue that the tcxentry can be released too early leading to a use after free UAF when an active old-style...

CVE-2024-41010

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcxentry Pedro Pinto and later independently also Hyunwoo Kim and Wongi Lee reported an issue that the tcxentry can be released too early leading to a use after free UAF when an active old-style...

CVE-2024-41010 bpf: Fix too early release of tcx_entry

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcxentry Pedro Pinto and later independently also Hyunwoo Kim and Wongi Lee reported an issue that the tcxentry can be released too early leading to a use after free UAF when an active old-style...

CVE-2024-41010 bpf: Fix too early release of tcx_entry

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcxentry Pedro Pinto and later independently also Hyunwoo Kim and Wongi Lee reported an issue that the tcxentry can be released too early leading to a use after free UAF when an active old-style...

CVE-2024-41010

CVE-2024-41010 concerns a Linux kernel vulnerability in the BPF tcx_entry management for old-style ingress/clsact qdiscs. The issue is a use-after-free caused by releasing tcx_entry too early when a shared tc block is replaced, enabling a local attacker to trigger a UAF through a specific qdisc s...

CVE-2024-41010: Use After Free

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcxentry Pedro Pinto and later independently also Hyunwoo Kim and Wongi Lee reported an issue that the tcxentry can be released too early leading to a use after free UAF when an active old-style...