CVE-2024-27043: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-27043 is a use-after-free vulnerability discovered in the Linux kernel's DVB device registration functionality. The issue affects Linux kernel versions from 2.6.21 up to versions prior to 6.8.2. The vulnerability was discovered by Zhipeng Lu and disclosed in February 2024 (Kernel Patch).

The vulnerability exists in the dvb_register_device function where *pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, *pdvbdev is not set to NULL after dvbdev's deallocation, causing use-after-free conditions. This occurs in a call chain: budget_register -> dvb_dmxdev_init -> dvb_register_device -> dvb_dmxdev_release -> dvb_unregister_device -> dvb_remove_device -> dvb_device_put -> kref_put. The CVSS v3.1 score for this vulnerability is 7.8 (High), with the vector string AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).

When calling dvb_unregister_device, dmxdev->dvbdev (i.e. *pdvbdev in dvb_register_device) could point to memory that had been freed in dvb_register_device. This pointer is then transferred to kref_put, triggering a use-after-free condition that could lead to privilege escalation, system crashes, or potential arbitrary code execution (Kernel Patch).

The vulnerability requires local access and low privileges to exploit. It affects the DVB (Digital Video Broadcasting) subsystem of the Linux kernel, which is commonly used in systems that handle digital television reception (NVD).

The vulnerability has been fixed in Linux kernel version 6.8.2 and backported to various stable kernel branches. Multiple distributions have released patches, including Ubuntu (versions 24.04 LTS, 22.04 LTS, and 20.04 LTS) and Debian. Users are advised to update their systems to the latest available kernel version that includes the fix (Ubuntu).