CVE-2024-50127

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in taprio_change() In 'taprio_change()', 'admin' pointer may become dangling due to sched switch / removal caused by 'advance_sched()', and critical section protected by 'q->current_entry_lock' is too small to prevent from such a scenario (which causes use-after-free detected by KASAN). Fix this by prefer 'rcu_replace_pointer()' over 'rcu_assign_pointer()' to update 'admin' immediately before an attempt to schedule freeing.

Reserved 2024-10-21 | Published 2024-11-05 | Updated 2024-11-19 | Assigner Linux

Product status

Default status
unaffected

a3d43c0d56f1 before 2f868ce60135
affected

a3d43c0d56f1 before 8a283a19026a
affected

a3d43c0d56f1 before 999612996df2
affected

a3d43c0d56f1 before fe371f084073
affected

a3d43c0d56f1 before 0d4c0d2844e4
affected

a3d43c0d56f1 before 2240f9376f20
affected

a3d43c0d56f1 before f504465970ae
affected

Default status
affected

5.2
affected

Any version before 5.2
unaffected

5.4.285
unaffected

5.10.229
unaffected

5.15.170
unaffected

6.1.115
unaffected

6.6.59
unaffected

6.11.6
unaffected

6.12
unaffected

References

git.kernel.org/stable/c/2f868ce6013548a713c431c679ef73747a66fcf3

git.kernel.org/stable/c/8a283a19026aaae8a773fd8061263cfa315b127f

git.kernel.org/stable/c/999612996df28d81f163dad530d7f8026e03aec6

git.kernel.org/stable/c/fe371f084073e8672a2d7d46b335c3c060d1e301

git.kernel.org/stable/c/0d4c0d2844e4eac3aed647f948fd7e60eea56a61

git.kernel.org/stable/c/2240f9376f20f8b6463232b4ca7292569217237f

git.kernel.org/stable/c/f504465970aebb2467da548f7c1efbbf36d0f44b

cve.org (CVE-2024-50127)

nvd.nist.gov (CVE-2024-50127)

Download JSON