In the Linux kernel, the following vulnerability has been resolved:
phonet/pep: fix racy skbqueueempty() use
The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skb_peek() unexpectedly returning NULL or a pointer to an already dequeued socket buffer.
[
{
"target": {
"function": "pep_ioctl",
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-09dab54a",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ef4fcc7014b9f93619851d6b78d6cc2789a4c88",
"digest": {
"function_hash": "74434621154198546688456872112165026659",
"length": 888.0
}
},
{
"target": {
"function": "pep_ioctl",
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-0e463095",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d3914a477eed92b48c493a8631cc4554ab4fd4f",
"digest": {
"function_hash": "297029472484774659279195472952856263703",
"length": 930.0
}
},
{
"target": {
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-1e5a8252",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d3914a477eed92b48c493a8631cc4554ab4fd4f",
"digest": {
"line_hashes": [
"10521674141346484868195404997931763913",
"44221513027914902849156285402334611847",
"213654244103218813324632855887457162600",
"112158793114477515565126156543907651542",
"337530114806222834694205189941259221317",
"307884507173094273770071344202698408423",
"325909750011778743759092944105808319117",
"277436977892504682721995631483964323109",
"209160493037028965298086033002738906693",
"315526197580959120396078414958965848155",
"178171535993792795682937623638378078291",
"73621240156738111257447570481270267359",
"157081890881906088118507042723457698873",
"16880912964457001002993918982397191509",
"97010214497980947532409235219665599235"
],
"threshold": 0.9
}
},
{
"target": {
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-2d5e9cb5",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a9f558c72c47472c38c05fcb72c70abb9104277",
"digest": {
"line_hashes": [
"229503209597244170259098653382848461544",
"102474770517828004969528554148437631845",
"298323237711581382516824614793026136205",
"112158793114477515565126156543907651542",
"337530114806222834694205189941259221317",
"307884507173094273770071344202698408423",
"286102743752752931354100122960315893956",
"36302834561957250875617468781440835981",
"98805176714444389883846772621719827067",
"193751974954239715193535477501765670489",
"256156196242114763142906972580914326377",
"61405388971325809465639519070154690857",
"230683166536770416193118977296837756052",
"311777412783104075595002772769857127251",
"5176196056299778968424525544592943906"
],
"threshold": 0.9
}
},
{
"target": {
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-488b6d40",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d5523e065b568e79dfaa2ea1085a5bcf74baf78",
"digest": {
"line_hashes": [
"10521674141346484868195404997931763913",
"44221513027914902849156285402334611847",
"213654244103218813324632855887457162600",
"112158793114477515565126156543907651542",
"337530114806222834694205189941259221317",
"307884507173094273770071344202698408423",
"325909750011778743759092944105808319117",
"277436977892504682721995631483964323109",
"209160493037028965298086033002738906693",
"315526197580959120396078414958965848155",
"178171535993792795682937623638378078291",
"73621240156738111257447570481270267359",
"157081890881906088118507042723457698873",
"16880912964457001002993918982397191509",
"97010214497980947532409235219665599235"
],
"threshold": 0.9
}
},
{
"target": {
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-5f9edada",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d2a894d7f487dcb894df023e9d3014cf5b93fe5",
"digest": {
"line_hashes": [
"229503209597244170259098653382848461544",
"102474770517828004969528554148437631845",
"298323237711581382516824614793026136205",
"112158793114477515565126156543907651542",
"337530114806222834694205189941259221317",
"307884507173094273770071344202698408423",
"286102743752752931354100122960315893956",
"36302834561957250875617468781440835981",
"98805176714444389883846772621719827067",
"193751974954239715193535477501765670489",
"256156196242114763142906972580914326377",
"61405388971325809465639519070154690857",
"230683166536770416193118977296837756052",
"311777412783104075595002772769857127251",
"5176196056299778968424525544592943906"
],
"threshold": 0.9
}
},
{
"target": {
"function": "pep_ioctl",
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-ae077035",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d5523e065b568e79dfaa2ea1085a5bcf74baf78",
"digest": {
"function_hash": "297029472484774659279195472952856263703",
"length": 930.0
}
},
{
"target": {
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-c2a54f0b",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ef4fcc7014b9f93619851d6b78d6cc2789a4c88",
"digest": {
"line_hashes": [
"229503209597244170259098653382848461544",
"102474770517828004969528554148437631845",
"298323237711581382516824614793026136205",
"112158793114477515565126156543907651542",
"337530114806222834694205189941259221317",
"307884507173094273770071344202698408423",
"286102743752752931354100122960315893956",
"36302834561957250875617468781440835981",
"98805176714444389883846772621719827067",
"193751974954239715193535477501765670489",
"256156196242114763142906972580914326377",
"61405388971325809465639519070154690857",
"230683166536770416193118977296837756052",
"311777412783104075595002772769857127251",
"5176196056299778968424525544592943906"
],
"threshold": 0.9
}
},
{
"target": {
"function": "pep_ioctl",
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-eb0d44d4",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a9f558c72c47472c38c05fcb72c70abb9104277",
"digest": {
"function_hash": "74434621154198546688456872112165026659",
"length": 888.0
}
},
{
"target": {
"function": "pep_ioctl",
"file": "net/phonet/pep.c"
},
"id": "CVE-2024-27402-ed910e38",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d2a894d7f487dcb894df023e9d3014cf5b93fe5",
"digest": {
"function_hash": "74434621154198546688456872112165026659",
"length": 888.0
}
}
]