PT-2024-21539 · Linux+6 · Linux Kernel+6
Syzbot
·
Published
2024-03-14
·
Updated
2025-09-29
·
CVE-2024-26862
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0-syzkaller-08073-g480e035fc4c7
Description
A data-race vulnerability has been resolved in the Linux kernel. The issue occurred because
ignore outgoing was read locklessly from dev queue xmit nit() and packet getsockopt(). To fix this, appropriate READ ONCE()/WRITE ONCE() annotations were added. The vulnerability was reported by the Kernel Concurrency Sanitizer.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, update to a version later than 6.8.0-syzkaller-08073-g480e035fc4c7.
Note: The provided information does not specify the exact version that includes the fix, but it is recommended to update to the latest available version to ensure the vulnerability is resolved.
Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu