CVE-2024-26831: net/handshake: Fix handshake_req_destroy_test1
In the Linux kernel, the following vulnerability has been resolved:
net/handshake: Fix handshakereqdestroytest1
Recently, handshakereqdestroytest1 started failing:
Expected handshakereqdestroytest == req, but handshakereqdestroytest == 0000000000000000 req == 0000000060f99b40 not ok 11 reqdestroy works
This is because "sockrelease(sock)" was replaced with "fput(filp)" to address a memory leak. Note that sockrelease() is synchronous but fput() usually delays the final close and clean-up.
The delay is not consequential in the other cases that were changed but handshakereqdestroytest1 is testing that handshakereqcancel() followed by closing the file actually does call the ->hpdestroy method. Thus the PTREQ test at the end has to be sure that the final close is complete before it checks the pointer.
We cannot use a completion here because if ->hpdestroy is never called (ie, there is an API bug) then the test will hang.
Reported by: Guenter Roeck <linux@roeck-us.net>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26831?
CVE-2024-26831 has a moderate severity level due to its impact on the Linux kernel's handshake processes.
How do I fix CVE-2024-26831?
To fix CVE-2024-26831, update the Linux kernel to one of the fixed versions: 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
Which versions of Linux are affected by CVE-2024-26831?
CVE-2024-26831 affects specific versions of the Linux kernel before 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, and 6.12.11-1.
Is CVE-2024-26831 exploitable in a production environment?
Yes, CVE-2024-26831 can potentially be exploited in a production environment if the affected kernel versions are in use.
What components are impacted by CVE-2024-26831?
CVE-2024-26831 primarily impacts the handshake functionalities within the Linux kernel.