• CVE-2023-52522

发布时间: 2024年4月19日

修改时间: 2024年4月19日

概要

In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list. Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing. I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().

CVSS v3 指标

NVD openEuler
CVSS评分 5.5
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

安全公告

公告名 概要 发布时间
KylinSec-SA-2024-1512 kernel security update 2024年4月19日
KylinSec-SA-2024-4773 kernel security update 2024年4月19日

影响产品

产品 状态
KY3.4-4A kernel Fixed
KY3.4-5A kernel Fixed
KY3.5.1 kernel Fixed
KY3.5.2 kernel Fixed