Use-After-Free Remote Code Execution Vulnerability

CVE-2024-23923

What is CVE-2024-23923?

A use-after-free vulnerability in the Alpine Halo9 prh_l2_sar_data_ind function can be exploited by unauthorized network-adjacent attackers. This flaw arises from the inadequate validation of object existence before executing operations, which can lead to executing arbitrary code in the context of root. This poses a significant risk to affected installations, as attackers do not require authentication to exploit the vulnerability.

References