In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk->sk_rx_dst to RCU rules syzbot reported various issues around early demux, one being included in this chan…
Critical CVSS 9.8
Summary
In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk->sk_rx_dst to RCU rules syzbot reported various issues around early demux, one being included in this changelog [1] sk->sk_rx_dst is using RCU protection without clearly documenting it. And following sequences in tcp_v4_do_rcv()/tcp_v6_do_rcv() are not following standard RCU rules. [a] dst_release(dst); [b] sk->sk_rx_dst = NULL; They look wrong because a delete operation of RCU protected point…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0249a4b8a554f2eb6a27b62516fa50168584faa4 Exploit
- https://git.kernel.org/stable/c/68c34ce11ef23328692aa35fa6aaafdd75913100 Exploit
- https://git.kernel.org/stable/c/75a578000ae5e511e5d0e8433c94a14d9c99c412 Exploit
- https://git.kernel.org/stable/c/8f905c0e7354ef261360fb7535ea079b1082c105 Exploit
- https://git.kernel.org/stable/c/92e6e36ecd16808866ac6172b9491b5097cde449 Exploit
- https://git.kernel.org/stable/c/c3bb4a7e8cbc984e1cdac0fe6af60e880214ed6e Exploit
- https://git.kernel.org/stable/c/f039b43cbaea5e0700980c2f0052da05a70782e0 Exploit
- https://git.kernel.org/stable/c/0249a4b8a554f2eb6a27b62516fa50168584faa4 Exploit
- https://git.kernel.org/stable/c/68c34ce11ef23328692aa35fa6aaafdd75913100 Exploit
- https://git.kernel.org/stable/c/75a578000ae5e511e5d0e8433c94a14d9c99c412 Exploit
- https://git.kernel.org/stable/c/8f905c0e7354ef261360fb7535ea079b1082c105 Exploit
- https://git.kernel.org/stable/c/92e6e36ecd16808866ac6172b9491b5097cde449 Exploit
- https://git.kernel.org/stable/c/c3bb4a7e8cbc984e1cdac0fe6af60e880214ed6e Exploit
- https://git.kernel.org/stable/c/f039b43cbaea5e0700980c2f0052da05a70782e0 Exploit
Timeline
- nvd_ingest NVD