发布时间: 2024年4月19日
修改时间: 2024年4月19日
In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list. Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing. I use rcu_assign_pointer() to have lockdep support, this was the choice made in neigh_flush_dev().
NVD | openEuler | |
---|---|---|
CVSS评分 | 5.5 | |
Attack Vector | Local | |
Attack Complexity | Low | |
Privileges Required | Low | |
User Interaction | None | |
Scope | Unchanged | |
Confidentiality | None | |
Integrity | None | |
Availability | High |
公告名 | 概要 | 发布时间 |
---|---|---|
KylinSec-SA-2024-1512 | kernel security update | 2024年4月19日 |
KylinSec-SA-2024-4773 | kernel security update | 2024年4月19日 |
产品 | 包 | 状态 |
---|---|---|
KY3.4-4A | kernel | Fixed |
KY3.4-5A | kernel | Fixed |
KY3.5.1 | kernel | Fixed |
KY3.5.2 | kernel | Fixed |