CVE-2024-47711

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the af unix module. The problem arises when the manage oob() function returns an out-of-band (OOB) socket buffer (skb) that has already been consumed, but the unix sk(sk)->oob skb pointer is not cleared. This can lead to a situation where the unix sk(sk)->oob skb is used after it has been freed, resulting in a use-after-free error. The issue was discovered by syzbot and is related to the unix stream recv urg() function. The estimated number of potentially affected devices is not provided, and there is no information about real-world incidents where this issue was exploited.

Technical details about exploitation include:

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.