CVE-2024-41081

July 29, 2024, 4:21 p.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable().

Product(s) Impacted

Product Versions
Linux kernel
  • []

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316
https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da
https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a
https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c
https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a
https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f
https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c
https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2024-07-29
CVE-2024-41081

Timeline

Published: July 29, 2024, 3:15 p.m.
Last Modified: July 29, 2024, 4:21 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.