In the Linux kernel, the following vulnerability has been resolved:
net: fix possible store tearing in neigh_periodic_work()
While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list.
Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing.
I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debugUpgrade kernel-rt-develUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-64k-modules-extraUpgrade kernel-toolsUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel | Sep 26, 2024 | Mar 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.198-187.748Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.136-90.144Upgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfo | Jul 9, 2024 | Mar 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.59-84.139Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpf | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jun 26, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-headersUpgrade kernel | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Mar 2, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Mar 2, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Mar 2, 2024 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-coreUpgrade bpftool-debuginfo | Oct 2, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-azureUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub