In the Linux kernel, the following vulnerability has been resolved:
net: fix possible store tearing in neigh_periodic_work()
While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list.
Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing.
I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-modulesUpgrade kernel-develUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matched | Sep 26, 2024 | Mar 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.198-187.748Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.15.136-90.144Upgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perf-debuginfo | Jul 9, 2024 | Mar 2, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.59-84.139Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Jun 26, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade bpftool | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Mar 2, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Mar 2, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debug-modules | Oct 2, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-generic-lts-xenial | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub