Researchers have uncovered a critical vulnerability in the Linux kernel’s TCP subsystem, identified as CVE-2024-36904. This flaw, introduced seven years ago, allows attackers to exploit a use-after-free condition, potentially leading to remote code execution (RCE). The vulnerability stems from a race condition in the inet_twsk_hashdance() function, where improper reference counter initialization creates opportunities for memory … Continue reading Seven-Year-Old Linux Kernel Vulnerability Allows Remote Code Execution