CVE-2024-41005

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41005
In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in netpoll_owner_active KCSAN detected a race condition in netpoll: BUG: KCSAN: data-race in net_rx_action / netpoll_send_skb write (marked) to 0xffff8881164168b0 of 4 bytes by interrupt on cpu 10: net_rx_action (./include/linux/netpoll.h:90 net/core/dev.c:6712 net/core/dev.c:6822) <snip> read to 0xffff8881164168b0 of 4 bytes by task 1 on cpu 2: netpoll_send_skb (net/core/netpoll.c:319 net/core/netpoll.c:345 net/core/netpoll.c:393) netpoll_send_udp (net/core/netpoll.c:?) <snip> value changed: 0x0000000a -> 0xffffffff This happens because netpoll_owner_active() needs to check if the current CPU is the owner of the lock, touching napi->poll_owner non atomically. The ->poll_owner field contains the current CPU holding the lock. Use an atomic read to check if the poll owner is the current CPU.

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3f1a155950a1685ffd0fd7175b3f671da8771f3d Patch
https://git.kernel.org/stable/c/43c0ca793a18578a0f5b305dd77fcf7ed99f1265 Patch
https://git.kernel.org/stable/c/96826b16ef9c6568d31a1f6ceaa266411a46e46c Patch
https://git.kernel.org/stable/c/a130e7da73ae93afdb4659842267eec734ffbd57 Patch
https://git.kernel.org/stable/c/c2e6a872bde9912f1a7579639c5ca3adf1003916 Patch
https://git.kernel.org/stable/c/efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8e Patch
https://git.kernel.org/stable/c/3f1a155950a1685ffd0fd7175b3f671da8771f3d Patch
https://git.kernel.org/stable/c/43c0ca793a18578a0f5b305dd77fcf7ed99f1265 Patch
https://git.kernel.org/stable/c/96826b16ef9c6568d31a1f6ceaa266411a46e46c Patch
https://git.kernel.org/stable/c/a130e7da73ae93afdb4659842267eec734ffbd57 Patch
https://git.kernel.org/stable/c/c2e6a872bde9912f1a7579639c5ca3adf1003916 Patch
https://git.kernel.org/stable/c/efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 Sep 2025, 19:38

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
CWE CWE-362
References () https://git.kernel.org/stable/c/3f1a155950a1685ffd0fd7175b3f671da8771f3d - () https://git.kernel.org/stable/c/3f1a155950a1685ffd0fd7175b3f671da8771f3d - Patch
References () https://git.kernel.org/stable/c/43c0ca793a18578a0f5b305dd77fcf7ed99f1265 - () https://git.kernel.org/stable/c/43c0ca793a18578a0f5b305dd77fcf7ed99f1265 - Patch
References () https://git.kernel.org/stable/c/96826b16ef9c6568d31a1f6ceaa266411a46e46c - () https://git.kernel.org/stable/c/96826b16ef9c6568d31a1f6ceaa266411a46e46c - Patch
References () https://git.kernel.org/stable/c/a130e7da73ae93afdb4659842267eec734ffbd57 - () https://git.kernel.org/stable/c/a130e7da73ae93afdb4659842267eec734ffbd57 - Patch
References () https://git.kernel.org/stable/c/c2e6a872bde9912f1a7579639c5ca3adf1003916 - () https://git.kernel.org/stable/c/c2e6a872bde9912f1a7579639c5ca3adf1003916 - Patch
References () https://git.kernel.org/stable/c/efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8e - () https://git.kernel.org/stable/c/efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8e - Patch

21 Nov 2024, 09:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3f1a155950a1685ffd0fd7175b3f671da8771f3d - () https://git.kernel.org/stable/c/3f1a155950a1685ffd0fd7175b3f671da8771f3d -
References () https://git.kernel.org/stable/c/43c0ca793a18578a0f5b305dd77fcf7ed99f1265 - () https://git.kernel.org/stable/c/43c0ca793a18578a0f5b305dd77fcf7ed99f1265 -
References () https://git.kernel.org/stable/c/96826b16ef9c6568d31a1f6ceaa266411a46e46c - () https://git.kernel.org/stable/c/96826b16ef9c6568d31a1f6ceaa266411a46e46c -
References () https://git.kernel.org/stable/c/a130e7da73ae93afdb4659842267eec734ffbd57 - () https://git.kernel.org/stable/c/a130e7da73ae93afdb4659842267eec734ffbd57 -
References () https://git.kernel.org/stable/c/c2e6a872bde9912f1a7579639c5ca3adf1003916 - () https://git.kernel.org/stable/c/c2e6a872bde9912f1a7579639c5ca3adf1003916 -
References () https://git.kernel.org/stable/c/efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8e - () https://git.kernel.org/stable/c/efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8e -
Summary
  • (es) En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: netpoll: Corrige condición de ejecución en netpoll_owner_active KCSAN detectó una condición de ejecución en netpoll: ERROR: KCSAN: data-race en net_rx_action / netpoll_send_skb escribe (marcado) en 0xffff8881164168b0 de 4 bytes por interrupción en CPU 10: net_rx_action (./include/linux/netpoll.h:90 net/core/dev.c:6712 net/core/dev.c:6822) leído en 0xffff8881164168b0 de 4 bytes por tarea 1 en la CPU 2 : netpoll_send_skb (net/core/netpoll.c:319 net/core/netpoll.c:345 net/core/netpoll.c:393) netpoll_send_udp (net/core/netpoll.c:?) valor cambiado: 0x0000000a -&gt; 0xffffffff Esto sucede porque netpoll_owner_active() necesita verificar si la CPU actual es la propietaria del bloqueo, tocando napi-&gt;poll_owner de forma no atómica. El campo -&gt;poll_owner contiene la CPU actual que mantiene el bloqueo. Utilice una lectura atómica para comprobar si el propietario de la encuesta es la CPU actual.

12 Jul 2024, 16:34

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-12 13:15

Updated : 2025-09-25 19:38

NVD link : CVE-2024-41005

Mitre link : CVE-2024-41005

CVE.ORG link : CVE-2024-41005

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')