CVE-2024-42280

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to a use after free in the hfcmulti tx() function. This can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability is caused by dereferencing *sp after calling dev kfree skb(*sp).

Recommendations For versions prior to 6.6.50, update to version 6.6.50 or later to resolve the issue. As a temporary workaround, consider disabling the hfcmulti tx() function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the dev kfree skb(*sp) function in conjunction with hfcmulti tx() until the issue is resolved.