In the Linux kernel, the following vulnerability has been resolved:
net: fix possible store tearing in neigh_periodic_work()
While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list.
Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing.
I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64kUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-coreUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-devel | Sep 26, 2024 | Mar 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.15.136-90.144Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.198-187.748Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Jul 9, 2024 | Mar 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-livepatch-6.1.59-84.139Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 26, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Mar 2, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Mar 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Mar 2, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64 | Oct 2, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1179-awsUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub