ZDI-24-1194: Linux Kernel Plan 9 File System Race Condition Local Privilege Escalation Vulnerability
First published: Thu Sep 05 2024(Updated: )
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the p9_fid object. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Kernel-devel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-24-1194?
The severity of ZDI-24-1194 is high due to its potential for privilege escalation on affected Linux Kernel installations.
How do I fix ZDI-24-1194?
To fix ZDI-24-1194, users should apply the recommended patches or updates provided by their Linux distribution.
Who is affected by ZDI-24-1194?
All installations of the Linux Kernel that have not been patched are potentially affected by ZDI-24-1194.
What type of exploitation is possible with ZDI-24-1194?
ZDI-24-1194 can be exploited by local attackers to escalate their privileges if they already have the ability to execute low-privileged code.
Is there a published CVE for ZDI-24-1194?
Yes, ZDI-24-1194 corresponds to a specific CVE, which provides additional details on the vulnerability.
- collector/zdi-published
- source/ZDI
- alias/ZDI-CAN-24058
- agent/title
- agent/last-modified-date
- agent/type
- agent/first-publish-date
- agent/references
- agent/severity
- agent/description
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/event
- collector/zdi-advisory
- alias/ZDI-24-1194
- alias/CVE-2024-39463
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/red hat kernel-devel