Skip to content
Not rated

CVE-2024-41005 In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in…

Description

In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in netpoll_owner_active KCSAN detected a race condition in netpoll: BUG: KCSAN: data-race in net_rx_action / netpoll_send_skb write (marked) to 0xffff8881164168b0 of 4 bytes by interrupt on cpu 10: net_rx_action (./include/linux/netpoll.h:90 net/core/dev.c:6712 net/core/dev.c:6822) <snip> read to 0xffff8881164168b0 of 4 bytes by task 1 on cpu 2: netpoll_send_skb (net/core/netpoll.c:319 net/core/netpoll.c:345 net/core/netpoll.c:393) netpoll_send_udp (net/core/netpoll.c:?) <snip> value changed: 0x0000000a -> 0xffffffff This happens because netpoll_owner_active() needs to check if the current CPU is the owner of the lock, touching napi->poll_owner non atomically. The ->poll_owner field contains the current CPU holding the lock. Use an atomic read to check if the poll owner is the current CPU.

Affected products and versions

Product Affected versions Fixed in
Linux 6.10 earliest → < 6.10 6.10
Linux 6.9 earliest → < 6.9.7 6.9.7
Linux 6.6 earliest → < 6.6.36 6.6.36
Linux 6.1 earliest → < 6.1.96 6.1.96
Linux 5.15 earliest → < 5.15.162 5.15.162
Linux 5.10 earliest → < 5.10.221 5.10.221
Linux 4.10 No fix stated
RUGGEDCOM RST2428P 3.1 earliest → < 3.1 3.1
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family Versions not published
Show the 2 other branches
Product Affected versions Fixed in
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1 earliest → < 3.1 3.1
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 earliest → < 1.1.1 1.1.1

References

Timeline

  1. Published
  2. Last modified
The 18283 CVEs of Linux →
Track this CVE