CVE-2024-47732

A possible flaw was found in the Linux 6.8 kernel version via the b190447e0fa3 commit. This flaw allows an attacker to trigger a pointer exception that could cause performance issues, mainly impacting availability. The code should not be reachable since it is not called anywhere, making this a weakness that could lead to a flaw if, at a certain point, the call to remove_device_compression_modes is introduced. However, if the address where the function is located is called by overriding the instruction pointer, which is unlikely to happen, this weakness could theoretically enable this as a flaw.

A moderate use-after-free flaw was found in the Linux kernel's Intel Analytics Accelerator (IAA) crypto driver. In free_device_compression_mode(), the "device_mode" object is freed and then passed to iaa_compression_modes[i]->free() a few lines later, resulting in a use-after-free. However, no implementation of the ->free() callback currently exists, so the vulnerable code path is effectively dead code that is not called anywhere; exploitation would require a local privileged user to redirect execution to this unreachable path, and the practical consequence would be limited to availability. Because the affected code is not reachable, Red Hat Enterprise Linux 6, 7, 8, and 9 (kernel and kernel-rt) and Red Hat managed OpenShift offerings are not affected. The Fedora kernel tracks the upstream fix, which is being pursued through the upstream kernel community. Red Hat rates this flaw Moderate (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), while the upstream CVE record assigns a higher score (7.0, AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H); this difference reflects Red Hat's assessment that the use-after-free resides in unreachable dead code, limiting real-world impact to a theoretical availability impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.