CVE - CVE-2024-27390

CVE-ID
CVE-2024-27390	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 ("ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()")) I think the synchronize_net() call in ipv6_mc_down() is not needed. Under load, synchronize_net() can last between 200 usec and 5 ms. KASAN seems to agree as well.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c URL:https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c MISC:https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373 URL:https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373 MISC:https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88 URL:https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88 MISC:https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7 URL:https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7 MISC:https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50 URL:https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50 MISC:https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04 URL:https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04
Assigning CNA
kernel.org
Date Record Created
20240225	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240225)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)