net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.110, 6.18.52, 7.2.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that trying to read /sys/kernel/debug/ref_tracker/* causes use-afer-free crash when either alloc_percpu() or dev_addr_init() in alloc_netdev_mqs() failed, for commit 4d92b95ff2f9 ("net: add net device refcount tracker infrastructure") added ref_tracker_dir_exit() to only free_netdev() path.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d · fixed in 45be87c5195f34c0a51598bc91186f600be5c4c9; From 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d · fixed in 2775bf36be7872834a7f8c0a0d9681a1a3e1cd4c; From 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d · fixed in 5fe03b5257095e2beef0bc79e1f068fbd09a24c7; From 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d · fixed in 63ab05e8f9654aa100d366c0236399fda6ffaab1; From 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d · fixed in 0b1c2af8a22c35cb099c735c2f63ea3ba757557d
- Linux Linux
5.17
- KernelLinux
From 5.17.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.6