PT-2024-32106 · Linux+5 · Linux Kernel+5
Published
2024-08-23
·
Updated
2026-05-26
·
CVE-2024-46678
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.9.0-rc4+
Description
The issue is related to the Linux kernel's bonding driver, where the
ipsec lock is changed from a spin lock to a mutex. This change is necessary because the xdo dev state add and xdo dev state delete functions, which are called inside the ipsec lock, may sleep, causing a "scheduling while atomic" error when changing the bond's active slave. The error is triggered when the ipsec lock is held and the xfrmdev operations sleep, leading to a scheduling conflict.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, versions 6.9.0-rc4 and later should include the necessary changes to the
ipsec lock to prevent the "scheduling while atomic" error.Note: The provided information does not specify the exact version where the fix is included, but it is mentioned that the issue is resolved in version 6.9.0-rc4+. Therefore, updating to this version or later should resolve the issue.
At the moment, there is no information about additional steps or workarounds that can be taken to mitigate this vulnerability beyond updating the Linux kernel.
Exploit
Fix
Improper Locking
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu