macsec: Fix use-after-free while sending the offloading packet

CVE-2024-50261

What is CVE-2024-50261?

A serious vulnerability has been identified in the Linux kernel where a use-after-free condition occurs while sending offloading packets related to the macsec functionality. This issue arises because the SCI value stored in metadata_dst is prematurely freed, leading to potential memory corruption. The kernel's KASAN tool reports this flaw, highlighting that the existing implementation in macsec should not immediately release metadata_dst if it is still referenced by the socket buffer (skb). An appropriate fix has been introduced to address this issue and prevent the associated risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References