# CVE-2024-46738: linux: In the Linux kernel, the following vulnerability has been resolved:  VMCI: Fix use-after-free when removing resource...

CVE-2024-46738 is fixed in 57 products on 1 platform, first by DEBIAN-CVE-2024-46738, released September 18, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-46738
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0028
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 18, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()  When removing a resource from vmci_resource_table in vmci_resource_remove(), the search is performed using the resource handle by comparing context and resource fields.  It is possible though to create two resources with different types but same handle (same context and resource fields).  When trying to remove one of the resources, vmci_resource_remove() may not remove the intended one, but the object will still be freed as in the case of the datagram type in vmci_datagram_destroy_handle(). vmci_resource_table will still hold a pointer to this freed resource leading to a use-after-free vulnerability.  BUG: KASAN: use-after-free in vmci_handle_is_equal include/linux/vmw_vmci_defs.h:142 [inline] BUG: KASAN: use-after-free in vmci_resource_remove+0x3a1/0x410 drivers/misc/vmw_vmci/vmci_resource.c:147 Read of size 4 at addr ffff88801c16d800 by task syz-executor197/1592 Call Trace:  <TASK>  __dump_stack lib/dump_stack.c:88 [inline]  dump_stack_lvl+0x82/0xa9 lib/dump_stack.c:106  print_address_description.constprop.0+0x21/0x366 mm/kasan/report.c:239  __kasan_report.cold+0x7f/0x132 mm/kasan/report.c:425  kasan_report+0x38/0x51 mm/kasan/report.c:442  vmci_handle_is_equal include/linux/vmw_vmci_defs.h:142 [inline]  vmci_resource_remove+0x3a1/0x410 drivers/misc/vmw_vmci/vmci_resource.c:147  vmci_qp_broker_detach+0x89a/0x11b9 drivers/misc/vmw_vmci/vmci_queue_pair.c:2182  ctx_free_ctx+0x473/0xbe1 drivers/misc/vmw_vmci/vmci_context.c:444  kref_put include/linux/kref.h:65 [inline]  vmci_ctx_put drivers/misc/vmw_vmci/vmci_context.c:497 [inline]  vmci_ctx_destroy+0x170/0x1d6 drivers/misc/vmw_vmci/vmci_context.c:195  vmci_host_close+0x125/0x1ac drivers/misc/vmw_vmci/vmci_host.c:143  __fput+0x261/0xa34 fs/file_table.c:282  task_work_run+0xf0/0x194 kernel/task_work.c:164  tracehook_notify_resume include/linux/tracehook.h:189 [inline]  exit_to_user_mode_loop+0x184/0x189 kernel/entry/common.c:187  exit_to_user_mode_prepare+0x11b/0x123 kernel/entry/common.c:220  __syscall_exit_to_user_mode_work kernel/entry/common.c:302 [inline]  syscall_exit_to_user_mode+0x18/0x42 kernel/entry/common.c:313  do_syscall_64+0x41/0x85 arch/x86/entry/common.c:86  entry_SYSCALL_64_after_hwframe+0x6e/0x0  This change ensures the type is also checked when removing the resource from vmci_resource_table in vmci_resource_remove().

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | bpftool-debuginfo amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.14.1 | [SUSE-SU-2024:3551-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3551-1.md) | Oct 8, 2024 |
| Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.14.1 | [SUSE-SU-2024:3551-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3551-1.md) | Oct 8, 2024 |
| Linux | kernel-coco sles 15.6 | 6.4.0-15061.6.coco15sp6.1 | [SUSE-SU-2024:3553-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3553-1.md) | Oct 8, 2024 |
| Linux | kernel-coco_debug sles 15.6 | 6.4.0-15061.6.coco15sp6.1 | [SUSE-SU-2024:3553-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3553-1.md) | Oct 8, 2024 |
| Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-debuginfo amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-debuginfo-common-aarch64 amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-debuginfo-common-x86_64 amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-default sles 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.25.1.150600.12.10.2 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.25.1.150600.12.10.2 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-devel amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.25.2 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.25.2 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-headers amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-libbpf amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-libbpf-devel amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-libbpf-static amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-livepatch-6.1.111-120.187 amzn 2023 | 1.0-0.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-livepatch-SLE15-SP6-RT_Update_4 sles 15.6 | 1-150600.1.3.1 | [SUSE-SU-2024:3564-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3564-1.md) | Oct 9, 2024 |
| Linux | kernel-livepatch-SLE15-SP6_Update_5 sles 15.6 | 1-150600.13.3.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-modules-extra amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-modules-extra-common amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.25.2 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.25.2 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.14.1 | [SUSE-SU-2024:3564-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3564-1.md) | Oct 9, 2024 |
| Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.14.1 | [SUSE-SU-2024:3564-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3564-1.md) | Oct 9, 2024 |
| Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-source sles 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.14.1 | [SUSE-SU-2024:3551-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3551-1.md) | Oct 8, 2024 |
| Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.14.1 | [SUSE-SU-2024:3551-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3551-1.md) | Oct 8, 2024 |
| Linux | kernel-source-coco sles 15.6 | 6.4.0-15061.6.coco15sp6.1 | [SUSE-SU-2024:3553-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3553-1.md) | Oct 8, 2024 |
| Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.14.1 | [SUSE-SU-2024:3564-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3564-1.md) | Oct 9, 2024 |
| Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.14.1 | [SUSE-SU-2024:3551-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3551-1.md) | Oct 8, 2024 |
| Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.14.1 | [SUSE-SU-2024:3551-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3551-1.md) | Oct 8, 2024 |
| Linux | kernel-syms-coco sles 15.6 | 6.4.0-15061.6.coco15sp6.1 | [SUSE-SU-2024:3553-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3553-1.md) | Oct 8, 2024 |
| Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.14.1 | [SUSE-SU-2024:3564-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3564-1.md) | Oct 9, 2024 |
| Linux | kernel-tools amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-tools-debuginfo amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-tools-devel amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | kernel-uek ol 8 | 0:5.4.17-2136.336.5.1.el8uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-uek-container ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12782](https://patchblox.com/security/data/fix/linux/elsa-2024-12782.md) | Oct 14, 2024 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12782](https://patchblox.com/security/data/fix/linux/elsa-2024-12782.md) | Oct 14, 2024 |
| Linux | kernel-uek-debug ol 8 | 0:5.4.17-2136.336.5.1.el8uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.4.17-2136.336.5.1.el8uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-uek-devel ol 8 | 0:5.4.17-2136.336.5.1.el8uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-uek-doc ol 8 | 0:5.4.17-2136.336.5.1.el8uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-uek-tools ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-uek-tools-libs ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.25.1 | [SUSE-SU-2024:3561-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3561-1.md) | Oct 9, 2024 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.112-1 | [DEBIAN-CVE-2024-46738](https://patchblox.com/security/data/fix/linux/debian-cve-2024-46738.md) | Sep 18, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.10.11-1 | [DEBIAN-CVE-2024-46738](https://patchblox.com/security/data/fix/linux/debian-cve-2024-46738.md) | Sep 18, 2024 |
| Linux | linux Debian 14 | 6.10.11-1 | [DEBIAN-CVE-2024-46738](https://patchblox.com/security/data/fix/linux/debian-cve-2024-46738.md) | Sep 18, 2024 |
| Linux | perf amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | perf ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | perf-debuginfo amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | python-perf ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | python3-perf amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |
| Linux | python3-perf-debuginfo amzn 2023 | 6.1.111-120.187.amzn2023 | [ALAS2023-2024-744](https://patchblox.com/security/data/fix/linux/alas2023-2024-744.md) | Oct 24, 2024 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.