In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_mon_reinit_self(). syzbot reported use-after-free of tipc_net(net)->monitors[] in tipc_mon_reini…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_mon_reinit_self(). syzbot reported use-after-free of tipc_net(net)->monitors[] in tipc_mon_reinit_self(). [0] The array is protected by RTNL, but tipc_mon_reinit_self() iterates over it without RTNL. tipc_mon_reinit_self() is called from tipc_net_finalize(), which is always under RTNL except for tipc_net_finalize_work(). Let's hold RTNL in tipc_net_finalize_work(). [0]: BUG: KASAN: slab-us…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0725e6afb55128be21a2ca36e9674f573ccec173
- https://git.kernel.org/stable/c/499b5fa78d525c4450ebb76db83207db71efea77
- https://git.kernel.org/stable/c/51b8f0ab888f8aa5dfac954918864eeda8c12c19
- https://git.kernel.org/stable/c/5f541300b02ef8b2af34f6f7d41ce617f3571e88
- https://git.kernel.org/stable/c/b2e77c789c234e7fe49057d2ced8f32e2d2c7901
- https://git.kernel.org/stable/c/c92dbf85627b5c29e52d9c120a24e785801716df
- https://git.kernel.org/stable/c/f0104977fed25ebe001fd63dab2b6b7fefad3373
- https://git.kernel.org/stable/c/fdf7c4c9af4f246323ce854e84b6aec198d49f7e
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html
Timeline
- nvd_ingest NVD