Threats tagged 'ghsa-68p8-jjxw-w2v4'

CVE-2024-40954 is a use-after-free vulnerability in the Linux kernel related to socket creation failure handling. The flaw occurs when a dangling socket pointer remains after socket creation fails, which can be triggered by attaching an fentry probe to __sock_release() that calls the bpf_get_socket_cookie() helper and running traceroute on a freshly booted VM. This vulnerability has a high severity score of 7.8 and can lead to high impact including confidentiality, integrity, and availability compromise.