CVE-2024-42108: 
Linux Debian vulnerability analysis and mitigation

A use-after-free vulnerability was discovered in the Linux kernel's rswitch driver (CVE-2024-42108). The vulnerability exists in the rswitch_tx_free() function, which is inlined in rswitch_poll(). The issue was discovered in July 2024 and affects Linux kernel versions from 6.8 up to (excluding) 6.9.9 (NVD).

The vulnerability occurs because skb and gq->skbs[gq->dirty] point to the same memory location. The code first frees the skb using dev_kfree_skb_any(), then attempts to use skb->len to update interface statistics, resulting in a use-after-free condition. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability can be triggered by sending a simple ARP request or ICMP echo request to the affected system. When exploited, it will trigger a kernel fault (splat) every few packets, potentially leading to system instability or denial of service (Kernel Patch).

The vulnerability is trivial to reproduce using KFENCE (Kernel Electric-Fence). A simple ARP request or ICMP echo request is sufficient to trigger the vulnerability, making it easily exploitable in practice (Kernel Patch).

The vulnerability has been fixed by reordering the instructions to use skb->len before freeing the skb. The fix has been merged into the Linux kernel and is available through the patch 9a0c28efeec6383ef22e97437616b920e7320b67. Users should update their Linux kernel to a patched version (Kernel Patch).