CVE-2024-26634: net: fix removing a namespace with conflicting altnames
First published: Mon Mar 18 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net: fix removing a namespace with conflicting altnames Mark reports a BUG() when a net namespace is removed. kernel BUG at net/core/dev.c:11520! Physical interfaces moved outside of init_net get "refunded" to init_net when that namespace disappears. The main interface name may get overwritten in the process if it would have conflicted. We need to also discard all conflicting altnames. Recent fixes addressed ensuring that altnames get moved with the main interface, which surfaced this problem.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/linux | 5.10.218-1 5.10.221-1 6.1.94-1 6.1.99-1 6.9.10-1 6.9.12-1 | |
| ubuntu/linux | <6.5.0-41.41 | 6.5.0-41.41 |
| ubuntu/linux | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-aws | <6.5.0-1021.21 | 6.5.0-1021.21 |
| ubuntu/linux-aws | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-aws-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-aws-5.4 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-aws-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-aws-fips | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-aws-hwe | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-azure | <6.5.0-1022.23 | 6.5.0-1022.23 |
| ubuntu/linux-azure | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-azure-4.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-azure-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-azure-5.4 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-azure-6.5 | <6.5.0-1022.23~22.04.1 | 6.5.0-1022.23~22.04.1 |
| ubuntu/linux-azure-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-azure-fde | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-azure-fde-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-azure-fips | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-bluefield | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-fips | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gcp | <6.5.0-1022.24 | 6.5.0-1022.24 |
| ubuntu/linux-gcp | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gcp-4.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gcp-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gcp-5.4 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gcp-6.5 | <6.5.0-1022.24~22.04.1 | 6.5.0-1022.24~22.04.1 |
| ubuntu/linux-gcp-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gcp-fips | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gke | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gkeop | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-gkeop-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-hwe | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-hwe-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-hwe-5.4 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-hwe-6.5 | <6.5.0-41.41~22.04.2 | 6.5.0-41.41~22.04.2 |
| ubuntu/linux-hwe-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-ibm | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-ibm-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-ibm-5.4 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-intel | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-intel-iotg | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-intel-iotg-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-iot | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-kvm | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-laptop | <6.5.0-1017.20 | 6.5.0-1017.20 |
| ubuntu/linux-laptop | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-lowlatency | <6.5.0-41.41.1 | 6.5.0-41.41.1 |
| ubuntu/linux-lowlatency | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-lowlatency-hwe-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-lowlatency-hwe-6.5 | <6.5.0-41.41.1~22.04.1 | 6.5.0-41.41.1~22.04.1 |
| ubuntu/linux-lowlatency-hwe-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-lts-xenial | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-nvidia | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-nvidia-6.5 | <6.5.0-1021.22 | 6.5.0-1021.22 |
| ubuntu/linux-nvidia-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-nvidia-6.8 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-nvidia-lowlatency | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-oem-6.5 | <6.5.0-1024.25 | 6.5.0-1024.25 |
| ubuntu/linux-oem-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-oem-6.8 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-oracle | <6.5.0-1024.24 | 6.5.0-1024.24 |
| ubuntu/linux-oracle | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-oracle-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-oracle-5.4 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-oracle-6.5 | <6.5.0-1024.24~22.04.1 | 6.5.0-1024.24~22.04.1 |
| ubuntu/linux-oracle-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-raspi | <6.5.0-1018.21 | 6.5.0-1018.21 |
| ubuntu/linux-raspi | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-raspi-5.4 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-riscv | <6.5.0-40.40.1 | 6.5.0-40.40.1 |
| ubuntu/linux-riscv | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-riscv-5.15 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-riscv-6.5 | <6.5.0-40.40.1~22.04.1 | 6.5.0-40.40.1~22.04.1 |
| ubuntu/linux-riscv-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-starfive | <6.5.0-1015.16 | 6.5.0-1015.16 |
| ubuntu/linux-starfive | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-starfive-6.5 | <6.5.0-1015.16~22.04.1 | 6.5.0-1015.16~22.04.1 |
| ubuntu/linux-starfive-6.5 | <6.8~<6.5. | 6.8~ 6.5. |
| ubuntu/linux-xilinx-zynqmp | <6.8~<6.5. | 6.8~ 6.5. |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/8072699aa9e67d1727692cfb3c347263bb627fb9
- https://git.kernel.org/stable/c/a2232f29bf52c24f827865b3c90829c44b6c695b
- https://git.kernel.org/stable/c/d09486a04f5da0a812c26217213b89a3b1acf836
- https://git.kernel.org/stable/c/e855dded4b70d1975ee7b9fed0c700391e3c8ea6
- https://launchpad.net/bugs/cve/CVE-2024-26634
- https://git.kernel.org/linus/d09486a04f5da0a812c26217213b89a3b1acf836
- https://security-tracker.debian.org/tracker/CVE-2024-26634
- https://git.kernel.org/linus/d09486a04f5da0a812c26217213b89a3b1acf836 (6.8-rc2)
- https://www.cve.org/CVERecord?id=CVE-2024-26634
- https://ubuntu.com/security/notices/USN-6818-1
- https://ubuntu.com/security/notices/USN-6819-1
- https://ubuntu.com/security/notices/USN-6818-2
- https://ubuntu.com/security/notices/USN-6819-2
- https://ubuntu.com/security/notices/USN-6819-3
- https://ubuntu.com/security/notices/USN-6818-3
- https://ubuntu.com/security/notices/USN-6818-4
- https://ubuntu.com/security/notices/USN-6819-4
- https://nvd.nist.gov/vuln/detail/CVE-2024-26634
- https://git.kernel.org/linus/7663d522099ecc464512164e660bc771b2ff7b64
- https://ubuntu.com/security/CVE-2024-26634
Parent vulnerabilities
(Appears in the following advisories)
- agent/severity
- agent/title
- agent/type
- collector/nvd-api
- source/NVD
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/nvd-cve
- collector/launchpad-cve
- source/Launchpad
- agent/remedy
- agent/first-publish-date
- agent/author
- agent/description
- agent/last-modified-date
- agent/references
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- package-manager/debian
- package-manager/ubuntu