THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2024-26689 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encode_cap_msg() In fs/ceph/caps.c, in encode_cap_msg(), "use after free" error was caught by KASAN at this line - 'ceph_buffer_get(arg->xattr_buf);'. This implies before the ref

[NVD] CVE-2024-26689 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encode_cap_msg() In fs/ceph/caps.c, in encode_cap_msg(), "use after free" error was caught by KASAN at this line - 'ceph_buffer_get(arg->xattr_buf);'. This implies before the ref

lownvdPublished 2024-04-03

CVE-2024-26689 CVSS: 8.8 HIGH Published: 2024-04-03T15:15:52.427

In the Linux kernel, the following vulnerability has been resolved:

ceph: prevent use-after-free in encode_cap_msg()

In fs/ceph/caps.c, in encode_cap_msg(), "use after free" error was caught by KASAN at this line - 'ceph_buffer_get(arg->xattr_buf);'. This implies before the refcount could be increment here, it was freed.

In same

Indicators of compromise

CVE-2024-26689cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-26689