PT-2024-9644 · Linux+8 · Linux Kernel+8
Syzbot
·
Published
2024-06-06
·
Updated
2025-09-29
·
CVE-2024-40905
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5
Description
The vulnerability is related to a possible race in the
fib6 drop pcpu from() function, which can cause a null pointer dereference. This issue can lead to a general protection fault and potentially allow an attacker to cause a denial of service. The vulnerability is caused by the compiler reading the value of *ppcpu rt more than once, and another CPU clearing the value in rt6 get pcpu route() between the reads. To prevent this race, a READ ONCE() has been added, and rcu read lock() and rcu read unlock() have been added to ensure RCU protection while dereferencing pcpu rt.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability, which is version 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 or later. As a temporary workaround, consider disabling the
fib6 drop pcpu from() function until a patch is available. However, this may have unintended consequences and should be done with caution.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu