In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. While fixing it I notic…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. While fixing it I noticed that nothing prevents a vlan to be freed while walking the list from the same path (br forward delay timer). Fix the rcu usage and also make sure we are not accessing freed memory by making br_mst_vlan_set_state use rcu read lock. [1] WARNING: suspicious RCU usage 6.9.0-rc6-syzkaller #0 Not ta…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/3a7c1661ae1383364cd6092d851f5e5da64d476b Patch
- https://git.kernel.org/stable/c/4488617e5e995a09abe4d81add5fb165674edb59 Patch
- https://git.kernel.org/stable/c/8ca9a750fc711911ef616ceb627d07357b04545e Patch
- https://git.kernel.org/stable/c/a2b01e65d9ba8af2bb086d3b7288ca53a07249ac Patch
- https://git.kernel.org/stable/c/e43dd2b1ec746e105b7db5f9ad6ef14685a615a4 Patch
- https://git.kernel.org/stable/c/3a7c1661ae1383364cd6092d851f5e5da64d476b Patch
- https://git.kernel.org/stable/c/4488617e5e995a09abe4d81add5fb165674edb59 Patch
- https://git.kernel.org/stable/c/8ca9a750fc711911ef616ceb627d07357b04545e Patch
- https://git.kernel.org/stable/c/a2b01e65d9ba8af2bb086d3b7288ca53a07249ac Patch
- https://git.kernel.org/stable/c/e43dd2b1ec746e105b7db5f9ad6ef14685a615a4 Patch
时间线
- nvd_ingest NVD