CVE-2024-27043 Affecting kernel-rt-debuginfo-common-x86_64 package, versions <0:4.18.0-553.30.1.rt7.371.el8_10


Severity

Recommended
low

Based on Rocky Linux security rating.

Threat Intelligence

EPSS
0.04% (15th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ROCKY8-KERNELRTDEBUGINFOCOMMONX8664-8531486
  • published19 Dec 2024
  • disclosed1 May 2024

Introduced: 1 May 2024

CVE-2024-27043  (opens in a new tab)

How to fix?

Upgrade Rocky-Linux:8 kernel-rt-debuginfo-common-x86_64 to version 0:4.18.0-553.30.1.rt7.371.el8_10 or higher.
This issue was patched in RLSA-2024:10282.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-rt-debuginfo-common-x86_64 package and not the kernel-rt-debuginfo-common-x86_64 package as distributed by Rocky-Linux. See How to fix? for Rocky-Linux:8 relevant fixed versions and status.

In the Linux kernel, the following vulnerability has been resolved:

media: edia: dvbdev: fix a use-after-free

In dvb_register_device, *pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, *pdvbdev is not set to NULL after dvbdev's deallocation, causing use-after-frees in many places, for example, in the following call chain:

budget_register |-> dvb_dmxdev_init |-> dvb_register_device |-> dvb_dmxdev_release |-> dvb_unregister_device |-> dvb_remove_device |-> dvb_device_put |-> kref_put

When calling dvb_unregister_device, dmxdev->dvbdev (i.e. *pdvbdev in dvb_register_device) could point to memory that had been freed in dvb_register_device. Thereafter, this pointer is transferred to kref_put and triggering a use-after-free.

CVSS Scores

version 3.1