CVE-2024-57857 RDMA/siw: Remove direct link to net_device
A use-after-free flaw in the Linux kernel's RDMA/siw driver allows attackers to cause a system crash or potentially execute code via crafted network traffic.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-57857?
CVE-2024-57857 is a high-severity use after free vulnerability in Linux kernel, published on 15 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Remove direct link to net_device
Do not manage a per device direct link to net_device. Rely on associated ib_devices net_device management, not doubling the effort locally. A badly managed local link to net_device was causing a 'KASAN: slab-use-after-free' exception during siw_query_port() call.
Weakness: CWE-416
Which versions are affected by CVE-2024-57857?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-57857?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2024-57857 being exploited?
There is no known exploitation of CVE-2024-57857 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-58974, AZL-59028, BELL-CVE-2024-57857, DEBIAN-CVE-2024-57857, GHSA-3f5v-6r4g-mx23, ROOT-OS-DEBIAN-11-CVE-2024-57857 and 4 more.