In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_mirred: use the backlog for mirred ingress
The test Davide added in commit ca22da2fbd69 ("act_mirred: use the backlog for nested calls to mirred ingress") hangs our testing VMs every 10 or so runs, with the familiar tcp_v4_rcv -> tcp_v4_rcv deadlock reported by lockdep.
The problem as previously described by Davide (see Link) is that if we reverse flow of traffic with the redirect (egress -> ingress) we may reach the same socket which generated the packet. And we may still be holding its socket lock. The common solution to such deadlocks is to put the packet in the Rx backlog, rather than run the Rx path inline. Do that for all egress -> ingress reversals, not just once we started to nest mirred calls.
In the past there was a concern that the backlog indirection will lead to loss of error reporting / less accurate stats. But the current workaround does not seem to address the issue.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-doc | Aug 12, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade python-perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-tools-libs-devel | Aug 22, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-xilinx | Jun 24, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub