In the Linux kernel, the following vulnerability has been resolved:
net: fix possible store tearing in neigh_periodic_work()
While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list.
Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing.
I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-coreUpgrade rvUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-devel | Sep 26, 2024 | Mar 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.15.136-90.144Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.198-187.748Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo | Jul 9, 2024 | Mar 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.59-84.139Upgrade kernel-libbpfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade bpftool | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelists | Jun 26, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-devel | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Mar 2, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Mar 2, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Mar 2, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-devel | Oct 2, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-266-genericUpgrade linux-image-lowlatency | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub