ipv6: mcast: add RCU protection to mld_newpack()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.15.179, 6.1.129, 6.6.79, 6.12.16, 6.13.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU protection to mld_newpack() mld_newpack() can be called without RTNL or RCU being held. Note that we no longer can use sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep. Instead use alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection.
Timeline
- CVE published
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- Linux Linux
From b8ad0cbc58f703972e9e37c4e2a8081dd7e6a551 · fixed in 29fa42197f26a97cde29fa8c40beddf44ea5c8f3; From b8ad0cbc58f703972e9e37c4e2a8081dd7e6a551 · fixed in e8af3632a7f2da83e27b083f787bced1faba00b1; From b8ad0cbc58f703972e9e37c4e2a8081dd7e6a551 · fixed in 1b91c597b0214b1b462eb627ec02658c944623f2; From b8ad0cbc58f703972e9e37c4e2a8081dd7e6a551 · fixed in 25195f9d5ffcc8079ad743a50c0409dbdc48d98a; From b8ad0cbc58f703972e9e37c4e2a8081dd7e6a551 · fixed in d60d493b0e65647e0335e6a7c4547abcea7df8e9; From b8ad0cbc58f703972e9e37c4e2a8081dd7e6a551 · fixed in a527750d877fd334de87eef81f1cb5f0f0ca3373
- Linux Linux
2.6.26
- KernelLinux
From 2.6.26 · fixed in 5.15.179; From 5.16.0 · fixed in 6.1.129; From 6.2.0 · fixed in 6.6.79; From 6.7.0 · fixed in 6.12.16; From 6.13.0 · fixed in 6.13.4