CVE-2024-53168

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket

BUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0

Read of size 1 at addr ffff888111f322cd by task swapper/0/0

CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7

Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1

Call Trace:

<IRQ>

dump_stack_lvl+0x68/0xa0

print_address_description.constprop.0+0x2c/0x3d0

print_report+0xb4/0x270

kasan_report+0xbd/0xf0

tcp_write_timer_handler+0x156/0x3e0

tcp_write_timer+0x66/0x170

call_timer_fn+0xfb/0x1d0

__run_timers+0x3f8/0x480

run_timer_softirq+0x9b/0x100

handle_softirqs+0x153/0x390

__irq_exit_rcu+0x103/0x120

irq_exit_rcu+0xe/0x20

sysvec_apic_timer_interrupt+0x76/0x90

</IRQ>

<TASK>

asm_sysvec_apic_timer_interrupt+0x1a/0x20

RIP: 0010:default_idle+0xf/0x20

Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90

90 90 90 90 f3 0f 1e f

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References