In the Linux kernel, the following vulnerability has been resolved:
net: fix possible store tearing in neigh_periodic_work()
While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list.
Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing.
I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-64k-develUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-docUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade libperfUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-modulesUpgrade rtlaUpgrade perfUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-tools | Sep 26, 2024 | Mar 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.198-187.748Upgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.136-90.144Upgrade kernel-debuginfo-common-aarch64 | Jul 9, 2024 | Mar 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.59-84.139Upgrade perf-debuginfoUpgrade python3-perfUpgrade perf | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Jun 26, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade perf | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Mar 2, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Mar 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Mar 2, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64 | Oct 2, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-genericUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub