CVE - CVE-2024-56709

CVE-ID
CVE-2024-56709	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring: check if iowq is killed before queuing task work can be executed after the task has gone through io_uring termination, whether it's the final task_work run or the fallback path. In this case, task work will find ->io_wq being already killed and null'ed, which is a problem if it then tries to forward the request to io_queue_iowq(). Make io_queue_iowq() fail requests in this case. Note that it also checks PF_KTHREAD, because the user can first close a DEFER_TASKRUN ring and shortly after kill the task, in which case ->iowq check would race.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2ca94c8de36091067b9ce7527ae8db3812d38781 URL:https://git.kernel.org/stable/c/2ca94c8de36091067b9ce7527ae8db3812d38781 MISC:https://git.kernel.org/stable/c/4f95a2186b7f2af09331e1e8069bcaf34fe019cf URL:https://git.kernel.org/stable/c/4f95a2186b7f2af09331e1e8069bcaf34fe019cf MISC:https://git.kernel.org/stable/c/534d59ab38010aada88390db65985e65d0de7d9e URL:https://git.kernel.org/stable/c/534d59ab38010aada88390db65985e65d0de7d9e MISC:https://git.kernel.org/stable/c/dbd2ca9367eb19bc5e269b8c58b0b1514ada9156 URL:https://git.kernel.org/stable/c/dbd2ca9367eb19bc5e269b8c58b0b1514ada9156
Assigning CNA
kernel.org
Date Record Created
20241227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)