[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-44946":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":104,"related":105,"reserved_at":9,"published_at":125,"modified_at":126,"state":127,"summary":128,"references_raw":137,"kevs":180,"epss":181,"epss_history":184,"metrics":453,"affected":459},"CVE-2024-44946","In the Linux kernel, the following vulnerability has been resolved:\n\nkcm: Serialise kcm_sendmsg() for the same socket.\n\nsyzkaller reported UAF in kcm_release(). [0]\n\nThe scenario is\n\n  1. Thread A builds a skb with MSG_MORE and sets kcm->seq_skb.\n\n  2. Thread A resumes building skb from kcm->seq_skb but is blocked\n     by sk_stream_wait_memory()\n\n  3. Thread B calls sendmsg() concurrently, finishes building kcm->seq_skb\n     and puts the skb to the write queue\n\n  4. Thread A faces an error and finally frees skb that is already in the\n     write queue\n\n  5. kcm_release() does double-free the skb in the write queue\n\nWhen a thread is building a MSG_MORE skb, another thread must not touch it.\n\nLet's add a per-sk mutex and serialise kcm_sendmsg().\n\n[0]:\nBUG: KASAN: slab-use-after-free in __skb_unlink include/linux/skbuff.h:2366 [inline]\nBUG: KASAN: slab-use-after-free in __skb_dequeue include/linux/skbuff.h:2385 [inline]\nBUG: KASAN: slab-use-after-free in __skb_queue_purge_reason include/linux/skbuff.h:3175 [inline]\nBUG: KASAN: slab-use-after-free in __skb_queue_purge include/linux/skbuff.h:3181 [inline]\nBUG: KASAN: slab-use-after-free in kcm_release+0x170/0x4c8 net/kcm/kcmsock.c:1691\nRead of size 8 at addr ffff0000ced0fc80 by task syz-executor329/6167\n\nCPU: 1 PID: 6167 Comm: syz-executor329 Tainted: G    B              6.8.0-rc5-syzkaller-g9abbc24128bc #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024\nCall trace:\n dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:291\n show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:298\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x178/0x518 mm/kasan/report.c:488\n kasan_report+0xd8/0x138 mm/kasan/report.c:601\n __asan_report_load8_noabort+0x20/0x2c mm/kasan/report_generic.c:381\n __skb_unlink include/linux/skbuff.h:2366 [inline]\n __skb_dequeue include/linux/skbuff.h:2385 [inline]\n __skb_queue_purge_reason include/linux/skbuff.h:3175 [inline]\n __skb_queue_purge include/linux/skbuff.h:3181 [inline]\n kcm_release+0x170/0x4c8 net/kcm/kcmsock.c:1691\n __sock_release net/socket.c:659 [inline]\n sock_close+0xa4/0x1e8 net/socket.c:1421\n __fput+0x30c/0x738 fs/file_table.c:376\n ____fput+0x20/0x30 fs/file_table.c:404\n task_work_run+0x230/0x2e0 kernel/task_work.c:180\n exit_task_work include/linux/task_work.h:38 [inline]\n do_exit+0x618/0x1f64 kernel/exit.c:871\n do_group_exit+0x194/0x22c kernel/exit.c:1020\n get_signal+0x1500/0x15ec kernel/signal.c:2893\n do_signal+0x23c/0x3b44 arch/arm64/kernel/signal.c:1249\n do_notify_resume+0x74/0x1f4 arch/arm64/kernel/entry-common.c:148\n exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline]\n exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline]\n el0_svc+0xac/0x168 arch/arm64/kernel/entry-common.c:713\n el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nAllocated by task 6166:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x40/0x78 mm/kasan/common.c:68\n kasan_save_alloc_info+0x70/0x84 mm/kasan/generic.c:626\n unpoison_slab_object mm/kasan/common.c:314 [inline]\n __kasan_slab_alloc+0x74/0x8c mm/kasan/common.c:340\n kasan_slab_alloc include/linux/kasan.h:201 [inline]\n slab_post_alloc_hook mm/slub.c:3813 [inline]\n slab_alloc_node mm/slub.c:3860 [inline]\n kmem_cache_alloc_node+0x204/0x4c0 mm/slub.c:3903\n __alloc_skb+0x19c/0x3d8 net/core/skbuff.c:641\n alloc_skb include/linux/skbuff.h:1296 [inline]\n kcm_sendmsg+0x1d3c/0x2124 net/kcm/kcmsock.c:783\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n sock_sendmsg+0x220/0x2c0 net/socket.c:768\n splice_to_socket+0x7cc/0xd58 fs/splice.c:889\n do_splice_from fs/splice.c:941 [inline]\n direct_splice_actor+0xec/0x1d8 fs/splice.c:1164\n splice_direct_to_actor+0x438/0xa0c fs/splice.c:1108\n do_splice_direct_actor \n---truncated---",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102],{"_key":25},"SUSE-SU-2024:3563-1",{"_key":27},"SUSE-SU-2024:3565-1",{"_key":29},"SUSE-SU-2024:3547-1",{"_key":31},"SUSE-SU-2024:3553-1",{"_key":33},"SUSE-SU-2024:3559-1",{"_key":35},"SUSE-SU-2024:3566-1",{"_key":37},"SUSE-SU-2024:3567-1",{"_key":39},"SUSE-SU-2024:3585-1",{"_key":41},"SUSE-SU-2024:3591-1",{"_key":43},"SUSE-SU-2024:3551-1",{"_key":45},"SUSE-SU-2024:3561-1",{"_key":47},"SUSE-SU-2024:3564-1",{"_key":49},"SUSE-SU-2024:3569-1",{"_key":51},"SUSE-SU-2024:3587-1",{"_key":53},"SUSE-SU-2024:3592-1",{"_key":55},"DLA-3912-1",{"_key":57},"DLA-4008-1",{"_key":59},"DSA-5782-1",{"_key":61},"SUSE-SU-2025:20073-1",{"_key":63},"SUSE-SU-2025:20077-1",{"_key":65},"MGASA-2024-0309",{"_key":67},"MGASA-2024-0310",{"_key":69},"DEBIAN-CVE-2024-44946",{"_key":71},"UBUNTU-CVE-2024-44946",{"_key":73},"USN-7088-1",{"_key":75},"USN-7088-2",{"_key":77},"USN-7088-3",{"_key":79},"USN-7088-4",{"_key":81},"USN-7088-5",{"_key":83},"USN-7100-1",{"_key":85},"USN-7100-2",{"_key":87},"USN-7119-1",{"_key":89},"USN-7123-1",{"_key":91},"USN-7144-1",{"_key":93},"USN-7154-1",{"_key":95},"USN-7154-2",{"_key":97},"USN-7155-1",{"_key":99},"USN-7156-1",{"_key":101},"USN-7194-1",{"_key":103},"USN-7196-1",[],[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":61},{"_key":63},{"_key":65},{"_key":67},"2024-08-31T13:22:47.250Z","2026-05-11T20:32:31.932Z","Modified",{"cisa_kev":129,"cisa_ransomware":129,"cisa_vendor":9,"epss_severity":130,"epss_score":131,"severity":132,"severity_score":133,"severity_version":134,"severity_source":135,"severity_vector":136,"severity_status":127},false,"low",0.00231,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[138,143,147,151,155,160,164,168,172,176],{"url":139,"sources":140,"tags":142},"https://git.kernel.org/stable/c/8c9cdbf600143bd6835c8b8351e5ac956da79aec",[141,135],"cve.org",[],{"url":144,"sources":145,"tags":146},"https://git.kernel.org/stable/c/6633b17840bf828921254d788ccd15602843fe9b",[141,135],[],{"url":148,"sources":149,"tags":150},"https://git.kernel.org/stable/c/eb06c8d3022ce6738711191c89f9b3e9cfb91914",[141,135],[],{"url":152,"sources":153,"tags":154},"https://git.kernel.org/stable/c/fa6c23fe6dcac8c8bd63920ee8681292a2bd544e",[141,135],[],{"url":156,"sources":157,"tags":158},"https://git.kernel.org/stable/c/72da240aafb142630cf16adc803ccdacb3780849",[141,135],[159],"Patch",{"url":161,"sources":162,"tags":163},"https://git.kernel.org/stable/c/00425508f30baa5ab6449a1f478480ca7cffa6da",[141,135],[159],{"url":165,"sources":166,"tags":167},"https://git.kernel.org/stable/c/9c8d544ed619f704e2b70e63e08ab75630c2ea23",[141,135],[159],{"url":169,"sources":170,"tags":171},"https://git.kernel.org/stable/c/807067bf014d4a3ae2cc55bd3de16f22a01eb580",[141,135],[159],{"url":173,"sources":174,"tags":175},"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",[141,135],[],{"url":177,"sources":178,"tags":179},"https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html",[141,135],[],[],{"date":182,"score":131,"percentile":183},"2026-06-04",0.46017,[185,189,192,195,198,201,204,207,210,213,216,219,222,225,228,232,235,238,240,243,246,249,252,255,258,261,264,267,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371,374,377,380,383,386,389,392,395,398,401,404,407,410,413,416,419,422,425,428,431,434,437,440,443,446,448,451],{"date":186,"score":187,"percentile":188},"2025-11-04",0.00251,0.48334,{"date":190,"score":187,"percentile":191},"2025-11-05",0.48315,{"date":193,"score":187,"percentile":194},"2025-11-06",0.48328,{"date":196,"score":187,"percentile":197},"2025-11-07",0.48356,{"date":199,"score":187,"percentile":200},"2025-11-08",0.48357,{"date":202,"score":187,"percentile":203},"2025-11-09",0.48339,{"date":205,"score":187,"percentile":206},"2025-11-10",0.48312,{"date":208,"score":187,"percentile":209},"2025-11-11",0.48326,{"date":211,"score":187,"percentile":212},"2025-11-12",0.4835,{"date":214,"score":187,"percentile":215},"2025-11-13",0.48352,{"date":217,"score":187,"percentile":218},"2025-11-14",0.48365,{"date":220,"score":187,"percentile":221},"2025-11-15",0.4836,{"date":223,"score":187,"percentile":224},"2025-11-16",0.48346,{"date":226,"score":187,"percentile":227},"2025-11-17",0.48321,{"date":229,"score":230,"percentile":231},"2025-11-18",0.01026,0.75376,{"date":233,"score":230,"percentile":234},"2025-11-19",0.75383,{"date":236,"score":230,"percentile":237},"2025-11-20",0.75393,{"date":239,"score":187,"percentile":206},"2025-11-21",{"date":241,"score":187,"percentile":242},"2025-11-22",0.48309,{"date":244,"score":187,"percentile":245},"2025-11-23",0.48279,{"date":247,"score":187,"percentile":248},"2025-11-24",0.48263,{"date":250,"score":187,"percentile":251},"2025-11-25",0.48267,{"date":253,"score":187,"percentile":254},"2025-11-26",0.48266,{"date":256,"score":187,"percentile":257},"2025-11-27",0.4827,{"date":259,"score":187,"percentile":260},"2025-11-28",0.48242,{"date":262,"score":187,"percentile":263},"2025-11-29",0.48222,{"date":265,"score":187,"percentile":266},"2025-11-30",0.4821,{"date":268,"score":187,"percentile":218},"2025-12-01",{"date":270,"score":187,"percentile":271},"2025-12-02",0.48381,{"date":273,"score":187,"percentile":274},"2025-12-03",0.48375,{"date":276,"score":187,"percentile":277},"2025-12-04",0.48209,{"date":279,"score":187,"percentile":280},"2025-12-05",0.48229,{"date":282,"score":187,"percentile":283},"2025-12-06",0.48231,{"date":285,"score":187,"percentile":286},"2025-12-07",0.48217,{"date":288,"score":187,"percentile":289},"2025-12-08",0.4822,{"date":291,"score":187,"percentile":292},"2025-12-09",0.48251,{"date":294,"score":131,"percentile":295},"2025-12-10",0.45848,{"date":297,"score":131,"percentile":298},"2025-12-11",0.45872,{"date":300,"score":131,"percentile":301},"2025-12-12",0.45901,{"date":303,"score":131,"percentile":304},"2025-12-13",0.45885,{"date":306,"score":131,"percentile":307},"2025-12-14",0.45871,{"date":309,"score":131,"percentile":310},"2025-12-15",0.45853,{"date":312,"score":131,"percentile":313},"2025-12-16",0.45868,{"date":315,"score":131,"percentile":316},"2025-12-17",0.45895,{"date":318,"score":131,"percentile":319},"2025-12-18",0.45938,{"date":321,"score":131,"percentile":322},"2025-12-19",0.45947,{"date":324,"score":131,"percentile":325},"2025-12-20",0.4592,{"date":327,"score":131,"percentile":328},"2025-12-21",0.45889,{"date":330,"score":131,"percentile":331},"2025-12-22",0.45867,{"date":333,"score":131,"percentile":334},"2025-12-23",0.4587,{"date":336,"score":131,"percentile":337},"2025-12-24",0.45879,{"date":339,"score":131,"percentile":340},"2025-12-25",0.45925,{"date":342,"score":131,"percentile":343},"2025-12-26",0.45909,{"date":345,"score":131,"percentile":346},"2025-12-27",0.45929,{"date":348,"score":131,"percentile":349},"2025-12-28",0.45838,{"date":351,"score":131,"percentile":352},"2025-12-29",0.4582,{"date":354,"score":131,"percentile":355},"2025-12-30",0.45815,{"date":357,"score":131,"percentile":358},"2025-12-31",0.45858,{"date":360,"score":131,"percentile":361},"2026-01-01",0.46015,{"date":363,"score":131,"percentile":364},"2026-01-02",0.45992,{"date":366,"score":131,"percentile":367},"2026-01-03",0.45979,{"date":369,"score":131,"percentile":370},"2026-01-04",0.45802,{"date":372,"score":131,"percentile":373},"2026-01-05",0.45783,{"date":375,"score":131,"percentile":376},"2026-01-06",0.45788,{"date":378,"score":131,"percentile":379},"2026-01-07",0.45806,{"date":381,"score":131,"percentile":382},"2026-01-08",0.4583,{"date":384,"score":131,"percentile":385},"2026-01-09",0.45801,{"date":387,"score":131,"percentile":388},"2026-01-10",0.45794,{"date":390,"score":131,"percentile":391},"2026-01-11",0.45773,{"date":393,"score":131,"percentile":394},"2026-01-12",0.45728,{"date":396,"score":131,"percentile":397},"2026-01-13",0.45698,{"date":399,"score":131,"percentile":400},"2026-01-14",0.45748,{"date":402,"score":131,"percentile":403},"2026-01-15",0.45741,{"date":405,"score":131,"percentile":406},"2026-01-16",0.45763,{"date":408,"score":131,"percentile":409},"2026-01-17",0.45738,{"date":411,"score":131,"percentile":412},"2026-01-18",0.45711,{"date":414,"score":131,"percentile":415},"2026-01-19",0.45681,{"date":417,"score":131,"percentile":418},"2026-01-20",0.45679,{"date":420,"score":131,"percentile":421},"2026-01-21",0.45683,{"date":423,"score":131,"percentile":424},"2026-01-22",0.45685,{"date":426,"score":131,"percentile":427},"2026-01-23",0.45735,{"date":429,"score":131,"percentile":430},"2026-01-24",0.45744,{"date":432,"score":131,"percentile":433},"2026-01-25",0.45689,{"date":435,"score":131,"percentile":436},"2026-01-26",0.45653,{"date":438,"score":131,"percentile":439},"2026-01-27",0.45656,{"date":441,"score":131,"percentile":442},"2026-01-28",0.45664,{"date":444,"score":131,"percentile":445},"2026-01-29",0.45655,{"date":447,"score":131,"percentile":442},"2026-01-30",{"date":449,"score":131,"percentile":450},"2026-01-31",0.45673,{"date":452,"score":131,"percentile":379},"2026-02-01",[454],{"source":135,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":455,"cvss_v4_0":9},{"baseScore":133,"baseSeverity":456,"vectorString":136,"impactScore":457,"exploitabilityScore":458},"MEDIUM",6,4.6,[460,495],{"ecosystem":9,"name":461,"vendor":462,"product":462,"cpe_part":463,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":464},"Linux","linux","a",[465,472,475,478,481,484,487,490,493],{"version":466,"is_range":467,"range_type":141,"version_start":468,"version_start_type":469,"version_end":470,"version_end_type":471,"fixed_in":9},">= ab7ac4eb9832e32a09f4e8042705484d2fb0aad3, \u003C 8c9cdbf600143bd6835c8b8351e5ac956da79aec",true,"ab7ac4eb9832e32a09f4e8042705484d2fb0aad3","including","8c9cdbf600143bd6835c8b8351e5ac956da79aec","excluding",{"version":473,"is_range":467,"range_type":141,"version_start":468,"version_start_type":469,"version_end":474,"version_end_type":471,"fixed_in":9},">= ab7ac4eb9832e32a09f4e8042705484d2fb0aad3, \u003C 6633b17840bf828921254d788ccd15602843fe9b","6633b17840bf828921254d788ccd15602843fe9b",{"version":476,"is_range":467,"range_type":141,"version_start":468,"version_start_type":469,"version_end":477,"version_end_type":471,"fixed_in":9},">= ab7ac4eb9832e32a09f4e8042705484d2fb0aad3, \u003C eb06c8d3022ce6738711191c89f9b3e9cfb91914","eb06c8d3022ce6738711191c89f9b3e9cfb91914",{"version":479,"is_range":467,"range_type":141,"version_start":468,"version_start_type":469,"version_end":480,"version_end_type":471,"fixed_in":9},">= ab7ac4eb9832e32a09f4e8042705484d2fb0aad3, \u003C fa6c23fe6dcac8c8bd63920ee8681292a2bd544e","fa6c23fe6dcac8c8bd63920ee8681292a2bd544e",{"version":482,"is_range":467,"range_type":141,"version_start":468,"version_start_type":469,"version_end":483,"version_end_type":471,"fixed_in":9},">= ab7ac4eb9832e32a09f4e8042705484d2fb0aad3, \u003C 72da240aafb142630cf16adc803ccdacb3780849","72da240aafb142630cf16adc803ccdacb3780849",{"version":485,"is_range":467,"range_type":141,"version_start":468,"version_start_type":469,"version_end":486,"version_end_type":471,"fixed_in":9},">= ab7ac4eb9832e32a09f4e8042705484d2fb0aad3, \u003C 00425508f30baa5ab6449a1f478480ca7cffa6da","00425508f30baa5ab6449a1f478480ca7cffa6da",{"version":488,"is_range":467,"range_type":141,"version_start":468,"version_start_type":469,"version_end":489,"version_end_type":471,"fixed_in":9},">= ab7ac4eb9832e32a09f4e8042705484d2fb0aad3, \u003C 9c8d544ed619f704e2b70e63e08ab75630c2ea23","9c8d544ed619f704e2b70e63e08ab75630c2ea23",{"version":491,"is_range":467,"range_type":141,"version_start":468,"version_start_type":469,"version_end":492,"version_end_type":471,"fixed_in":9},">= ab7ac4eb9832e32a09f4e8042705484d2fb0aad3, \u003C 807067bf014d4a3ae2cc55bd3de16f22a01eb580","807067bf014d4a3ae2cc55bd3de16f22a01eb580",{"version":494,"is_range":129,"range_type":141,"version_start":494,"version_start_type":469,"version_end":494,"version_end_type":469,"fixed_in":9},"4.6",{"ecosystem":9,"name":496,"vendor":462,"product":497,"cpe_part":498,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":499},"linux kernel","linux_kernel","o",[500,504,508,512,514,516,518],{"version":501,"is_range":467,"range_type":502,"version_start":494,"version_start_type":469,"version_end":503,"version_end_type":471,"fixed_in":9},"gte4.6_lt6.1.107","cpe","6.1.107",{"version":505,"is_range":467,"range_type":502,"version_start":506,"version_start_type":469,"version_end":507,"version_end_type":471,"fixed_in":9},"gte6.2_lt6.6.48","6.2","6.6.48",{"version":509,"is_range":467,"range_type":502,"version_start":510,"version_start_type":469,"version_end":511,"version_end_type":471,"fixed_in":9},"gte6.7_lt6.10.7","6.7","6.10.7",{"version":513,"is_range":129,"range_type":502,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.11:rc1",{"version":515,"is_range":129,"range_type":502,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.11:rc2",{"version":517,"is_range":129,"range_type":502,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.11:rc3",{"version":519,"is_range":129,"range_type":502,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.11:rc4"]