CVE-2024-35890: gro: fix ownership transfer
In the Linux kernel, the following vulnerability has been resolved:
gro: fix ownership transfer
If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skbsegmentlist those skbs can be reused as-is. This is an issue as their destructor was removed in skbgroreceivelist but not the reference to their socket, and then they can't be orphaned. Fix this by also removing the reference to the socket.
For example this could be observed,
kernel BUG at include/linux/skbuff.h:3131! (skborphan) RIP: 0010:ip6rcvcore+0x11bc/0x19a0 Call Trace: ipv6listrcv+0x250/0x3f0 netifreceiveskblistcore+0x49d/0x8f0 netifreceiveskblistinternal+0x634/0xd40 napicompletedone+0x1d2/0x7d0 grocellpoll+0x118/0x1f0
A similar construction is found in skbgroreceive, apply the same change there.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
gro: fix ownership transfer
The Linux kernel CVE team has assigned CVE-2024-35890 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051948-CVE-2024-35890-beaa@gregkh/T
— Red Hat
Linux Kernel is vulnerable to a denial of service, caused by a ownership transfer issue if packets are GROed with fraglist. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35890?
CVE-2024-35890 has a high severity rating due to its potential impact on kernel operations.
How do I fix CVE-2024-35890?
To fix CVE-2024-35890, upgrade your kernel to version 5.15.154 or above, 6.1.85 or above, or 6.6.26 or above depending on your distribution.
What are the affected Linux kernel versions for CVE-2024-35890?
Affected versions for CVE-2024-35890 include kernel versions prior to 5.15.154, 6.1.85, 6.6.26, 6.8.5, and 6.9.
What impact does CVE-2024-35890 have on system security?
CVE-2024-35890 can lead to potential security risks by allowing misuse of memory segments in the kernel.
Who should be aware of CVE-2024-35890?
System administrators and users running affected versions of the Linux kernel should be aware of CVE-2024-35890 to ensure system security.