CVE-2024-41081

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41081
In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 Patch
https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da Patch
https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a Patch
https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c Patch
https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a Patch
https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f Patch
https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c Patch
https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 Patch
https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 Patch
https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da Patch
https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a Patch
https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c Patch
https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a Patch
https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f Patch
https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c Patch
https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
History

09 Oct 2025, 18:02

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 - () https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 - Patch
References () https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da - () https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da - Patch
References () https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a - () https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a - Patch
References () https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c - () https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c - Patch
References () https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a - () https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a - Patch
References () https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f - () https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f - Patch
References () https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c - () https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c - Patch
References () https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 - () https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 - () https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 -
References () https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da - () https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da -
References () https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a - () https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a -
References () https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c - () https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c -
References () https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a - () https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a -
References () https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f - () https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f -
References () https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c - () https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c -
References () https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 - () https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ila: bloquear BH en ila_output() Como se explica en la confirmación 1378817486d6 ("tipc: bloquear BH antes de usar dst_cache"), los ayudantes net/core/dst_cache.c deben llamarse con BH desactivado. ila_output() se llama desde lwtunnel_output() posiblemente desde el contexto del proceso y bajo rcu_read_lock(). Podríamos ser interrumpidos por un softirq, volver a ingresar a ila_output() y dañar las estructuras de datos dst_cache. Arregle la carrera usando local_bh_disable().

29 Jul 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-29 15:15

Updated : 2025-10-09 18:02

NVD link : CVE-2024-41081

Mitre link : CVE-2024-41081

CVE.ORG link : CVE-2024-41081

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo