In the Linux kernel, the following vulnerability has been resolved:
net: fix possible store tearing in neigh_periodic_work()
While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list.
Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing.
I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64k-debug-coreUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64kUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade rvUpgrade kernel-64k-debug-develUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-64k-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-uki-virt | Sep 26, 2024 | Mar 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.198-187.748Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.136-90.144Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-devel | Jul 9, 2024 | Mar 2, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.59-84.139Upgrade perfUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfo | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 26, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Mar 2, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Mar 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Mar 2, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvm | Oct 2, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1179-awsUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-virtual-hwe-16.04 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub