In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib_nhc_update_mtu() fib_nhc_update_mtu() walks the nexthop exception table under RTNL, but RTNL does…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib_nhc_update_mtu() fib_nhc_update_mtu() walks the nexthop exception table under RTNL, but RTNL does not serialize this walk with PMTU exception updates. The walk uses rcu_dereference_protected() with a constant true condition without holding fnhe_lock. The following interleaving can therefore occur: CPU 0 CPU 1 fib_nhc_update_mtu() update_or_create…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/5a28a4b22dde92f9d293b94236314b8d6181dc4a
- https://git.kernel.org/stable/c/63996ffc594d128ccec8fc0983f91effd2d3adc4
- https://git.kernel.org/stable/c/bc5bde9ce3cc36502839dfe98e068f7303a50982
- https://git.kernel.org/stable/c/dfe388da13aa784851e5ebbea90afbb099075761
- https://git.kernel.org/stable/c/e00f7d2b5f2540a3415a229c982af7a25ff6362e
- https://git.kernel.org/stable/c/e1e602d6b22d5cb1641c4459c487eb18bf569e0a
- https://git.kernel.org/stable/c/ed503eaad62f20cdd5122d7c3078a648a99c8f16
- https://git.kernel.org/stable/c/fd39e711866498ae94fcf9acf6f422a4f045b681
Timeline
- nvd_ingest NVD