Lucene search

K
zdiLucas Leong (@_wmliang_) of Trend Micro Zero Day InitiativeZDI-24-842
HistoryJun 21, 2024 - 12:00 a.m.

Linux Kernel ICMPv6 Router Advertisement Race Condition Remote Code Execution Vulnerability

2024-06-2100:00:00
Lucas Leong (@_wmliang_) of Trend Micro Zero Day Initiative
www.zerodayinitiative.com
5
network-adjacent
attackers
code execution
linux kernel
vulnerability
authentication
route information
locking
kernel context

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

23.8%

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Route Information options. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

23.8%