CVE-2024-25198: Use After Free
Inappropriate pointer order of laserscanfilter.reset() and tflistener.reset() (amclnode.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25198?
CVE-2024-25198 has been classified as having moderate severity due to its potential for triggering a use-after-free condition.
How do I fix CVE-2024-25198?
To fix CVE-2024-25198, ensure the correct order of pointer resets in the amcl_node.cpp file of the affected ROS2 and Nav2 versions.
Which versions are affected by CVE-2024-25198?
CVE-2024-25198 affects Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions.
What is the impact of CVE-2024-25198 on system security?
CVE-2024-25198 could lead to crashes or arbitrary code execution due to the use-after-free vulnerability.
Is there a workaround for CVE-2024-25198?
Currently, applying the fix provided in the updates is the recommended method for addressing CVE-2024-25198, as there are no known workarounds.