CVE - CVE-2024-41081

CVE-ID
CVE-2024-41081	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 URL:https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 MISC:https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da URL:https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da MISC:https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a URL:https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a MISC:https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c URL:https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c MISC:https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a URL:https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a MISC:https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f URL:https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f MISC:https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c URL:https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c MISC:https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 URL:https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)