CVE-2024-57912

What it actually does

Uninitialized padding bytes in a local struct used for triggered buffer data transfer allow kernel memory contents to be copied to userspace.

Why it matters to the business

Attackers may obtain fragments of kernel memory, increasing risk of information disclosure that could aid further attacks; the issue affects numerous Red Hat JBoss Enterprise Web Server deployments with high ecosystem prevalence.

How an attack unfolds

An attacker with local access triggers the buffer mechanism in the affected driver, causing the uninitialized struct hole to be pushed to userspace where the leaked bytes can be read and analyzed; listed threat actors involved in 2024 zero-day campaigns and Linux kernel uninitialized resource issues have targeted similar flaws.

How to fix it

Update affected packages to the fixed versions: httpd24 and related modules to 2.4.6-61.ep7.el7, mod_proxy24_html and mod_ssl24 to 1:2.4.6-61.ep7.el7, mod_security-jws3 to 0:2.8.0-7.GA.ep7.el7, tomcat7 and components to 0:7.0.59-50_patch_01.ep7.el7, tomcat8 and components to 0:8.0.18-61_patch_01.ep7.el7.

How to confirm the fix worked

Verify package versions match the listed fixed releases and confirm the struct initialization change is present in the deployed kernel module source or binary.

Typical attack path

1. Obtain local access on an affected system
2. Trigger the sensor buffer mechanism to populate the struct
3. Read the resulting userspace data to extract uninitialized bytes
4. Analyze leaked memory for sensitive kernel information

How to detect it

Review kernel and application logs for unexpected buffer or sensor data access patterns; correlate with listed threat actor TTPs around Linux kernel uninitialized resource and out-of-bounds issues.

What your security team should do

• Apply the exact fixed package versions immediately given the 630 days since publication
• Prioritize systems with high exposure to local users or untrusted processes
• Monitor for any new EPSS increases despite current stable low score