CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix a race between socket set up and I/O thread creation
In rxrpcopensocket(), it sets up the socket and then sets up the I/O thread that will handle it. This is a problem, however, as there's a gap between the two phases in which a packet may come into rxrpcencaprcv() from the UDP packet but we oops when trying to wake the not-yet created I/O thread.
As a quick fix, just make rxrpcencaprcv() discard the packet if there's no I/O thread yet.
A better, but more intrusive fix would perhaps be to rearrange things such that the socket creation is done by the I/O thread.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49864?
CVE-2024-49864 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-49864?
To fix CVE-2024-49864, upgrade to patched versions of the Linux kernel such as 5.10.223-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-49864?
CVE-2024-49864 affects Linux kernel versions from 6.2 up to 6.6.55, as well as certain 6.10 and 6.11 versions.
Is CVE-2024-49864 exploitable remotely?
CVE-2024-49864 may potentially be exploited remotely due to the socket setup race condition.
What are the potential impacts of CVE-2024-49864?
The impacts of CVE-2024-49864 include the possibility of a denial of service due to improper handling of socket connections.