CVE-2024-35880

CVE-2024-35880 is a vulnerability in the Linux kernel's io_uring subsystem, specifically related to how kernel buffers (kbuf) are handled during memory mapping (mmap) operations. The flaw stems from a situation where a buffer can be unregistered prematurely while it is still being used, leading to a potential use-after-free issue.

The io_uring mechanism uses the Read-Copy-Update (RCU) method to manage buffers during mmap. However, the absence of a strong reference to the buffer during operations allows it to be unregistered while still in use.

This can result in memory dereferencing errors, leading to crashes or unpredictable behavior.

This vulnerability is rated as Moderate severity because exploitation requires an attacker to possess local access to execute arbitrary system calls on the host, preventing remote exploitation. In Red Hat Enterprise Linux environments, an unprivileged local user could potentially trigger memory corruption or a denial of service by racing buffer unregistration against memory mapping operations within the io_uring subsystem. Because the issue cannot be triggered across the network and requires specific local concurrency, the overall impact remains limited to local disruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.