CVE-2014-0100: Race Condition
Description of the problem:
A very subtle race condition between inetfragevictor, inetfragintern and the IPv4/6 fragqueue and expire functions (basically the users of inetfragkill/inetfragput) was found.
What happens is that after a fragment has been added to the hash chain but before it's been added to the lrulist (inetfraglruadd), it may get deleted (either by an expired timer if the system load is high or the timer sufficiently low, or by the fraqqueue function for different reasons) before it's added to the lrulist, then after it gets added it's a matter of time for the evictor to get to a piece of memory which has been freed leading to a number of different bugs depending on what's left there.
Introduced by: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ef0eb0d
Acknowledgements:
This issue was discovered by Nikolay Aleksandrov of Red Hat.
Other sources
Race condition in the inetfragintern function in net/ipv4/inetfragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0100?
CVE-2014-0100 is rated as high severity due to its potential impact on the system's stability and security.
How do I fix CVE-2014-0100?
To fix CVE-2014-0100, update to a patched version of the Linux kernel that includes the appropriate vulnerability fixes.
Which versions of the Linux kernel are affected by CVE-2014-0100?
CVE-2014-0100 affects Linux kernel versions between 3.9 and 3.10.37, as well as certain other versions up to 3.13.10.
Is CVE-2014-0100 related to network security?
Yes, CVE-2014-0100 involves a race condition affecting the IPv4/IPv6 fragment handling in the Linux kernel, directly impacting network security.
Are there any recommended versions to upgrade for CVE-2014-0100?
It's advisable to upgrade to kernel versions such as 5.10.223-1, 6.1.123-1, or later to mitigate CVE-2014-0100.