NetSight
IP …
high7.8

CVE-2024-50127

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in taprio_change() In 'taprio_change()', 'admin' pointer may…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in taprio_change() In 'taprio_change()', 'admin' pointer may become dangling due to sched switch / removal caused by 'advance_sched()', and critical section protected by 'q->current_entry_lock' is too small to prevent from such a scenario (which causes use-after-free detected by KASAN). Fix this by prefer 'rcu_replace_pointer()' over 'rcu_assign_pointer()' to update 'admin' immediately before an attempt to schedule freeing.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.2 before 5.15.170
from 5.16 before 6.1.115
from 6.2 before 6.6.59
from 6.7 before 6.11.6
Version 6.12

Weakness classification

CWE-416

References