2 matches found
CVE-2023-52772: Use After Free
In the Linux kernel, the following vulnerability has been resolved: afunix: fix use-after-free in unixstreamreadactor syzbot reported the following crash 1 After releasing unix socket lock, u-oobskb can be changed by another thread. We must temporarily increase skb refcount to make sure this othe...
7.8CVSS6.7AI score0.00243EPSS
SaveExploits0References12
CVE-2024-35970
A vulnerability was found in the Linux kernel's Unix domain socket afunix implementation, where stale Out-of-Band OOB data is not cleared from the receive queue. This issue arises when OOB data is dequeued but the associated oobskb is not cleared, leading to incorrect behavior in subsequent recv...
5.5CVSS7.1AI score0.00503EPSS
SaveExploits0References4
20