CVE - CVE-2024-49864

CVE-ID
CVE-2024-49864	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix a race between socket set up and I/O thread creation In rxrpc_open_socket(), it sets up the socket and then sets up the I/O thread that will handle it. This is a problem, however, as there's a gap between the two phases in which a packet may come into rxrpc_encap_rcv() from the UDP packet but we oops when trying to wake the not-yet created I/O thread. As a quick fix, just make rxrpc_encap_rcv() discard the packet if there's no I/O thread yet. A better, but more intrusive fix would perhaps be to rearrange things such that the socket creation is done by the I/O thread.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/56e415202b8a17de6496f4023e545fcb66f118ec URL:https://git.kernel.org/stable/c/56e415202b8a17de6496f4023e545fcb66f118ec MISC:https://git.kernel.org/stable/c/bc212465326e8587325f520a052346f0b57360e6 URL:https://git.kernel.org/stable/c/bc212465326e8587325f520a052346f0b57360e6 MISC:https://git.kernel.org/stable/c/c64f5fc95e9612fdf75587c8e21e494e614c18e2 URL:https://git.kernel.org/stable/c/c64f5fc95e9612fdf75587c8e21e494e614c18e2 MISC:https://git.kernel.org/stable/c/cdf4bbbdb956d7426f687f38757ebca2a2759a0f URL:https://git.kernel.org/stable/c/cdf4bbbdb956d7426f687f38757ebca2a2759a0f
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)