Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Vulnerability - Action Required: Use After Free vulnerability may in your project #801

Open
Crispy-fried-chicken opened this issue Sep 6, 2024 · 0 comments

Comments

@Crispy-fried-chicken
Copy link

Hi,
we have detected that your project may be vulnerable to Use After Free in the function of nr_listen in the file of trunk/linux-3.4.x/net/netrom/af_netrom.c . It shares similarities to a recent CVE disclosure CVE-2023-32269 in the linux.

The source vulnerability information is as follows:

Vulnerability Detail:
CVE Identifier: CVE-2023-32269
Description: An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-32269
Patch: torvalds/linux@6117929

Would you help to check if this bug is true? If it's true, I'd like to open a PR for that if necessary. Thank you for your effort and patience!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant