In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting e…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list. sockets are AF_UNIX/SO…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/2e2a03787f4f0abc0072350654ab0ef3324d9db3 Patch
- https://git.kernel.org/stable/c/343c5372d5e17b306db5f8f3c895539b06e3177f Patch
- https://git.kernel.org/stable/c/47d8ac011fe1c9251070e1bd64cb10b48193ec51 Patch
- https://git.kernel.org/stable/c/507cc232ffe53a352847893f8177d276c3b532a9 Patch
- https://git.kernel.org/stable/c/a36ae0ec2353015f0f6762e59f4c2dbc0c906423 Patch
- https://git.kernel.org/stable/c/b75722be422c276b699200de90527d01c602ea7c Patch
- https://git.kernel.org/stable/c/dbdf7bec5c920200077d693193f989cb1513f009 Patch
- https://git.kernel.org/stable/c/e76c2678228f6aec74b305ae30c9374cc2f28a51 Patch
- https://git.kernel.org/stable/c/2e2a03787f4f0abc0072350654ab0ef3324d9db3 Patch
- https://git.kernel.org/stable/c/343c5372d5e17b306db5f8f3c895539b06e3177f Patch
- https://git.kernel.org/stable/c/47d8ac011fe1c9251070e1bd64cb10b48193ec51 Patch
- https://git.kernel.org/stable/c/507cc232ffe53a352847893f8177d276c3b532a9 Patch
- https://git.kernel.org/stable/c/a36ae0ec2353015f0f6762e59f4c2dbc0c906423 Patch
- https://git.kernel.org/stable/c/b75722be422c276b699200de90527d01c602ea7c Patch
- https://git.kernel.org/stable/c/dbdf7bec5c920200077d693193f989cb1513f009 Patch
- https://git.kernel.org/stable/c/e76c2678228f6aec74b305ae30c9374cc2f28a51 Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
Timeline
- nvd_ingest NVD