CVE-2024-26852

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588

Description The vulnerability is related to a use-after-free issue in the ip6 route mpath notify() function. This issue can be exploited to potentially elevate privileges in the system. The vulnerability was discovered by syzbot, and a commit was made to prevent the use-after-free, but it did not fully address the root cause. The fib6 info release() calls need to be deferred after ip6 route mpath notify() in the cleanup phase.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, versions after 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588 should include the necessary patches. As a temporary workaround, consider disabling the ip6 route mpath notify() function until a patch is available. However, this may have unintended consequences on the system's networking functionality.