In the Linux kernel, the following vulnerability has been resolved:
net: Fix an unsafe loop on the list
The kernel may crash when deleting a genetlink family if there are still listeners for that family:
Oops: Kernel access of bad area, sig: 11 [#1] ... NIP [c000000000c080bc] netlinkupdatesocketmc+0x3c/0xc0 LR [c000000000c0f764] _netlinkclearmulticastusers+0x74/0xc0 Call Trace: _netlinkclearmulticastusers+0x74/0xc0 genlunregister_family+0xd4/0x2d0
Change the unsafe loop on the list to a safe one, because inside the loop there is an element removal from this list.
[ { "id": "CVE-2024-50024-12ed060b", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/netlink/af_netlink.c" }, "digest": { "line_hashes": [ "320104986628787138115253664451161970739", "100684260106225794858376457353104361640", "151466942972001031402739781535836559427", "151993092084730135831512752428891399397", "81633868796249496921190861022108577464" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dae9f1187189bc09ff6d25ca97ead711f7e26f9" }, { "id": "CVE-2024-50024-140d05e3", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "include/net/sock.h" }, "digest": { "line_hashes": [ "301874891733441954103690909856486972297", "54187814159581946948356009609234838789", "55773197039709006304614607945067025861", "236355097351801655324039400898492238233" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e0766fcf37ad8eed289dd3853628dd9b01b58b0" }, { "id": "CVE-2024-50024-1bab4bb2", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "include/net/sock.h" }, "digest": { "line_hashes": [ "139004978503770473199288512903332663545", "220218849058120517529011935741453522184", "156944932468999968230578776968138913504", "198925231736765157118238791835468039980" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5f03a7f601f33cda1f710611625235dc86fd8a9e" }, { "id": "CVE-2024-50024-279186f0", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/netlink/af_netlink.c", "function": "__netlink_clear_multicast_users" }, "digest": { "function_hash": "182522101115655495864318065107762109704", "length": 214.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cdec792b2450105b1314c5123a9a0452cb2c2f0" }, { "id": "CVE-2024-50024-2a1ea519", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "include/net/sock.h" }, "digest": { "line_hashes": [ "139004978503770473199288512903332663545", "220218849058120517529011935741453522184", "156944932468999968230578776968138913504", "198925231736765157118238791835468039980" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3be342e0332a7c83eb26fbb22bf156fdca467a5d" }, { "id": "CVE-2024-50024-339d8700", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/netlink/af_netlink.c" }, "digest": { "line_hashes": [ "320104986628787138115253664451161970739", "100684260106225794858376457353104361640", "151466942972001031402739781535836559427", "151993092084730135831512752428891399397", "81633868796249496921190861022108577464" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3be342e0332a7c83eb26fbb22bf156fdca467a5d" }, { "id": "CVE-2024-50024-37898a97", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "include/net/sock.h" }, "digest": { "line_hashes": [ "301874891733441954103690909856486972297", "54187814159581946948356009609234838789", "55773197039709006304614607945067025861", "236355097351801655324039400898492238233" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd" }, { "id": "CVE-2024-50024-3cd78090", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/netlink/af_netlink.c", "function": "__netlink_clear_multicast_users" }, "digest": { "function_hash": "182522101115655495864318065107762109704", "length": 214.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68ad5da6ca630a276f0a5c924179e57724d00013" }, { "id": "CVE-2024-50024-3e114856", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "include/net/sock.h" }, "digest": { "line_hashes": [ "301874891733441954103690909856486972297", "54187814159581946948356009609234838789", "55773197039709006304614607945067025861", "236355097351801655324039400898492238233" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dae9f1187189bc09ff6d25ca97ead711f7e26f9" }, { "id": "CVE-2024-50024-4319989c", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "include/net/sock.h" }, "digest": { "line_hashes": [ "301874891733441954103690909856486972297", "54187814159581946948356009609234838789", "55773197039709006304614607945067025861", "236355097351801655324039400898492238233" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cdec792b2450105b1314c5123a9a0452cb2c2f0" }, { "id": "CVE-2024-50024-577bd8ac", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/netlink/af_netlink.c" }, "digest": { "line_hashes": [ "320104986628787138115253664451161970739", "100684260106225794858376457353104361640", "151466942972001031402739781535836559427", "151993092084730135831512752428891399397", "81633868796249496921190861022108577464" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68ad5da6ca630a276f0a5c924179e57724d00013" }, { "id": "CVE-2024-50024-5983857b", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/netlink/af_netlink.c", "function": "__netlink_clear_multicast_users" }, "digest": { "function_hash": "182522101115655495864318065107762109704", "length": 214.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd" }, { "id": "CVE-2024-50024-5ff6d0b0", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/netlink/af_netlink.c" }, "digest": { "line_hashes": [ "320104986628787138115253664451161970739", "100684260106225794858376457353104361640", "151466942972001031402739781535836559427", "151993092084730135831512752428891399397", "81633868796249496921190861022108577464" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cdec792b2450105b1314c5123a9a0452cb2c2f0" }, { "id": "CVE-2024-50024-6a543b2c", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/netlink/af_netlink.c" }, "digest": { "line_hashes": [ "320104986628787138115253664451161970739", "100684260106225794858376457353104361640", "151466942972001031402739781535836559427", "151993092084730135831512752428891399397", "81633868796249496921190861022108577464" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@464801a0f6ccb52b21faa33bac6014fd74cc5e10" }, { "id": "CVE-2024-50024-7581983f", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/netlink/af_netlink.c", "function": "__netlink_clear_multicast_users" }, "digest": { "function_hash": "182522101115655495864318065107762109704", "length": 214.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3be342e0332a7c83eb26fbb22bf156fdca467a5d" }, { "id": "CVE-2024-50024-836162b6", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/netlink/af_netlink.c" }, "digest": { "line_hashes": [ "320104986628787138115253664451161970739", "100684260106225794858376457353104361640", "151466942972001031402739781535836559427", "151993092084730135831512752428891399397", "81633868796249496921190861022108577464" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd" }, { "id": "CVE-2024-50024-8d5adb24", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/netlink/af_netlink.c" }, "digest": { "line_hashes": [ "320104986628787138115253664451161970739", "100684260106225794858376457353104361640", "151466942972001031402739781535836559427", "151993092084730135831512752428891399397", "81633868796249496921190861022108577464" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5f03a7f601f33cda1f710611625235dc86fd8a9e" }, { "id": "CVE-2024-50024-9a534518", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/netlink/af_netlink.c", "function": "__netlink_clear_multicast_users" }, "digest": { "function_hash": "182522101115655495864318065107762109704", "length": 214.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@464801a0f6ccb52b21faa33bac6014fd74cc5e10" }, { "id": "CVE-2024-50024-a2a4b087", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/netlink/af_netlink.c", "function": "__netlink_clear_multicast_users" }, "digest": { "function_hash": "182522101115655495864318065107762109704", "length": 214.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5f03a7f601f33cda1f710611625235dc86fd8a9e" }, { "id": "CVE-2024-50024-d035db44", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/netlink/af_netlink.c" }, "digest": { "line_hashes": [ "320104986628787138115253664451161970739", "100684260106225794858376457353104361640", "151466942972001031402739781535836559427", "151993092084730135831512752428891399397", "81633868796249496921190861022108577464" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e0766fcf37ad8eed289dd3853628dd9b01b58b0" }, { "id": "CVE-2024-50024-d571efe4", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/netlink/af_netlink.c", "function": "__netlink_clear_multicast_users" }, "digest": { "function_hash": "182522101115655495864318065107762109704", "length": 214.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e0766fcf37ad8eed289dd3853628dd9b01b58b0" }, { "id": "CVE-2024-50024-e0b647e1", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/netlink/af_netlink.c", "function": "__netlink_clear_multicast_users" }, "digest": { "function_hash": "182522101115655495864318065107762109704", "length": 214.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dae9f1187189bc09ff6d25ca97ead711f7e26f9" }, { "id": "CVE-2024-50024-ed25bd23", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "include/net/sock.h" }, "digest": { "line_hashes": [ "301874891733441954103690909856486972297", "54187814159581946948356009609234838789", "55773197039709006304614607945067025861", "236355097351801655324039400898492238233" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@464801a0f6ccb52b21faa33bac6014fd74cc5e10" }, { "id": "CVE-2024-50024-f05b0577", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "include/net/sock.h" }, "digest": { "line_hashes": [ "301874891733441954103690909856486972297", "54187814159581946948356009609234838789", "55773197039709006304614607945067025861", "236355097351801655324039400898492238233" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68ad5da6ca630a276f0a5c924179e57724d00013" } ]