NetSight
IP …
critical9.8

CVE-2024-41081

In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before u…

Impact

In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.10 before 4.19.319
from 4.20 before 5.4.281
from 5.5 before 5.10.223
from 5.11 before 5.15.164
from 5.16 before 6.1.101
from 6.2 before 6.6.42

References