ZDI-CAN-24591: ZDI-24-1182: Linux Kernel Netfilter Conntrack Type Confusion Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation of connection tracking. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel.
Other sources
This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-24591?
The severity of ZDI-CAN-24591 is classified as high due to the potential for sensitive information disclosure.
How do I fix ZDI-CAN-24591?
To fix ZDI-CAN-24591, ensure you apply the latest patches provided for the Linux Kernel.
Who is affected by ZDI-CAN-24591?
ZDI-CAN-24591 affects installations of the Linux Kernel that can be exploited by local attackers with low-privileged code execution.
What impact does ZDI-CAN-24591 have on systems?
ZDI-CAN-24591 allows attackers to disclose sensitive information, which could lead to further exploitation.
How can I mitigate the risks associated with ZDI-CAN-24591?
To mitigate risks from ZDI-CAN-24591, limit access to systems and ensure security best practices are followed while waiting for patches.