Lucene search

K
redhatcveRedhat.comRH:CVE-2024-36971
HistoryJun 14, 2024 - 4:12 a.m.

CVE-2024-36971

2024-06-1404:12:59
redhat.com
access.redhat.com
12
linux kernel
net vulnerability
uaf
rcu rules
dst cache
udp sockets

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

43.6%

A use-after-free flaw was found in the Linux kernel’s network route management. This flaw allows an attacker to alter the behavior of certain network connections.

Mitigation

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

43.6%