Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-27418
HistoryMay 17, 2024 - 11:51 a.m.

CVE-2024-27418 net: mctp: take ownership of skb in mctp_local_output

2024-05-1711:51:11
Linux
github.com
3
linux kernel
vulnerability
cve-2024-27418
net
mctp_local_output
skb ownership

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: mctp: take ownership of skb in mctp_local_output

Currently, mctp_local_output only takes ownership of skb on success, and
we may leak an skb if mctp_local_output fails in specific states; the
skb ownership isn’t transferred until the actual output routing occurs.

Instead, make mctp_local_output free the skb on all error paths up to
the route action, so it always consumes the passed skb.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial