• CVE-2023-52522

发布时间: 2024年4月19日

修改时间: 2024年10月31日

概要

In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list. Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing. I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().

CVSS v3 指标

NVD openEuler
Confidentiality None
Attack Vector Local
CVSS评分 N/A 5.5
Attack Complexity Low
Privileges Required Low
Scope Unchanged
Integrity None
User Interaction None
Availability High

安全公告

公告名 概要 发布时间
KylinSec-SA-2024-1512 kernel security update 2024年4月19日
KylinSec-SA-2024-4773 kernel security update 2025年2月17日

影响产品

产品 状态
KY3.4-4A kernel Fixed
KY3.4-5 kernel Fixed
KY3.5.1 kernel Fixed
KY3.5.2 kernel Fixed