CVE-2024-39503

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the ipset component of the netfilter subsystem between namespace cleanup and garbage collection (gc) in the list:set type. This occurs when namespace cleanup destroys the list:set type of sets while the garbage collection is waiting to execute in the RCU (Read-Copy-Update) cleanup. Consequently, the garbage collection process uses data from the already destroyed set, resulting in a use-after-free condition. This issue could allow an attacker to achieve privilege escalation within the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.