PT-2024-21493 · Linux · Linux Kernel

Syzbot · Published 2024-02-21 · Updated 2025-02-03 · CVE-2024-26732

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b

Description A vulnerability has been resolved in the Linux kernel, specifically in the net subsystem, where a lockdep violation was reported by syzbot involving af unix support of SO PEEK OFF. The issue arises because SO PEEK OFF is inherently not thread-safe, using a per-socket sk peek off field. After the patch, setsockopt(SO PEEK OFF) no longer acquires the socket lock, and skb consume udp() does not need to acquire the socket lock. Additionally, af unix no longer requires a special version of sk set peek off() since it does not lock u->iolock anymore.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the patch for this vulnerability. Specifically, versions 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b and later should be used. If updating is not immediately possible, consider temporarily disabling the use of SO PEEK OFF to minimize the risk of exploitation.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-833

CWE-667

Related Identifiers

BDU:2025-04397

CVE-2024-26732

Affected Products

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26732.json · Exploit
• https://git.kernel.org/stable/c/897f75e2cde8a5f9f7529b55249af1fa4248c83b · Patch
• https://osv.dev/vulnerability/CVE-2024-26732 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26732 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26732 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26732 · Security Note
• https://ubuntu.com/security/CVE-2024-26732 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26732 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04397 · Security Note
• https://git.kernel.org/stable/c/56667da7399eb19af857e30f41bea89aa6fa812c · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-26732 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-26732 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.7 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26732 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note