CVE-2024-26838: RDMA/irdma: Fix KASAN issue with tasklet
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix KASAN issue with tasklet
KASAN testing revealed the following issue assocated with freeing an IRQ.
[50006.466686] Call Trace: [50006.466691] <IRQ> [50006.489538] dumpstack+0x5c/0x80 [50006.493475] printaddressdescription.constprop.6+0x1a/0x150 [50006.499872] ? irdmascprocessceq+0x483/0x790 [irdma] [50006.505742] ? irdmascprocessceq+0x483/0x790 [irdma] [50006.511644] kasanreport.cold.11+0x7f/0x118 [50006.516572] ? irdmascprocessceq+0x483/0x790 [irdma] [50006.522473] irdmascprocessceq+0x483/0x790 [irdma] [50006.528232] irdmaprocessceq+0xb2/0x400 [irdma] [50006.533601] ? irdmahwflushwqescallback+0x370/0x370 [irdma] [50006.540298] irdmaceqdpc+0x44/0x100 [irdma] [50006.545306] taskletactioncommon.isra.14+0x148/0x2c0 [50006.551096] dosoftirq+0x1d0/0xaf8 [50006.555396] irqexitrcu+0x219/0x260 [50006.559670] irqexit+0xa/0x20 [50006.563320] smpapictimerinterrupt+0x1bf/0x690 [50006.568645] apictimerinterrupt+0xf/0x20 [50006.573341] </IRQ>
The issue is that a tasklet could be pending on another core racing the delete of the irq.
Fix by insuring any scheduled tasklet is killed after deleting the irq.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix KASAN issue with tasklet
The Linux kernel CVE team has assigned CVE-2024-26838 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041715-CVE-2024-26838-2fdb@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.150 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.80 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.19 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7.7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26838?
CVE-2024-26838 is classified with a moderate severity level due to potential impacts on vulnerability exploitation related to IRQ freeing.
How do I fix CVE-2024-26838?
To address CVE-2024-26838, update the Linux kernel to version 5.15.150 or later for Red Hat and appropriate versions for Debian as specified.
What systems are affected by CVE-2024-26838?
CVE-2024-26838 affects multiple Linux kernel versions across Red Hat and Debian distributions.
What impact does CVE-2024-26838 have on system performance?
CVE-2024-26838 may lead to instability issues in the affected systems, particularly under specific conditions during IRQ handling.
Is there a patch available for CVE-2024-26838?
Yes, patches are available in updated kernel versions for both Red Hat and Debian systems to mitigate CVE-2024-26838.