CVE-2024-26838: RDMA/irdma: Fix KASAN issue with tasklet
First published: Wed Apr 17 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix KASAN issue with tasklet KASAN testing revealed the following issue assocated with freeing an IRQ. [50006.466686] Call Trace: [50006.466691] <IRQ> [50006.489538] dump_stack+0x5c/0x80 [50006.493475] print_address_description.constprop.6+0x1a/0x150 [50006.499872] ? irdma_sc_process_ceq+0x483/0x790 [irdma] [50006.505742] ? irdma_sc_process_ceq+0x483/0x790 [irdma] [50006.511644] kasan_report.cold.11+0x7f/0x118 [50006.516572] ? irdma_sc_process_ceq+0x483/0x790 [irdma] [50006.522473] irdma_sc_process_ceq+0x483/0x790 [irdma] [50006.528232] irdma_process_ceq+0xb2/0x400 [irdma] [50006.533601] ? irdma_hw_flush_wqes_callback+0x370/0x370 [irdma] [50006.540298] irdma_ceq_dpc+0x44/0x100 [irdma] [50006.545306] tasklet_action_common.isra.14+0x148/0x2c0 [50006.551096] __do_softirq+0x1d0/0xaf8 [50006.555396] irq_exit_rcu+0x219/0x260 [50006.559670] irq_exit+0xa/0x20 [50006.563320] smp_apic_timer_interrupt+0x1bf/0x690 [50006.568645] apic_timer_interrupt+0xf/0x20 [50006.573341] </IRQ> The issue is that a tasklet could be pending on another core racing the delete of the irq. Fix by insuring any scheduled tasklet is killed after deleting the irq.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <5.15.150 | 5.15.150 |
| redhat/kernel | <6.1.80 | 6.1.80 |
| redhat/kernel | <6.6.19 | 6.6.19 |
| redhat/kernel | <6.7.7 | 6.7.7 |
| redhat/kernel | <6.8 | 6.8 |
| Linux Kernel | >=5.14<5.15.150 | |
| Linux Kernel | >=5.16<6.1.80 | |
| Linux Kernel | >=6.2<6.6.19 | |
| Linux Kernel | >=6.7<6.7.7 | |
| Linux Kernel | =6.8-rc1 | |
| Linux Kernel | =6.8-rc2 | |
| Linux Kernel | =6.8-rc3 | |
| Linux Kernel | =6.8-rc4 | |
| Linux Kernel | =6.8-rc5 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.128-1 6.12.21-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/0ae8ad0013978f7471f22bcf45b027393e87f5dc
- https://git.kernel.org/stable/c/635d79aa477f9912e602feb5498bdd51fb9cb824
- https://git.kernel.org/stable/c/b2e4a5266e3d133b4c7f0e43bf40d13ce14fd1aa
- https://git.kernel.org/stable/c/bd97cea7b18a0a553773af806dfbfac27a7c4acb
- https://git.kernel.org/stable/c/c6f1ca235f68b22b3e691b2ea87ac285e5946848
- https://launchpad.net/bugs/cve/CVE-2024-26838
- https://access.redhat.com/security/cve/CVE-2024-26838
- https://lore.kernel.org/linux-cve-announce/2024041715-CVE-2024-26838-2fdb@gregkh/T
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2275579
- https://access.redhat.com/errata/RHSA-2024:9315
- https://bugzilla.redhat.com/show_bug.cgi?id=2275578
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26838
- https://nvd.nist.gov/vuln/detail/CVE-2024-26838
- https://security-tracker.debian.org/tracker/CVE-2024-26838
- https://ubuntu.com/security/CVE-2024-26838
- https://git.kernel.org/linus/bd97cea7b18a0a553773af806dfbfac27a7c4acb
Frequently Asked Questions
What is the severity of CVE-2024-26838?
CVE-2024-26838 is classified with a moderate severity level due to potential impacts on vulnerability exploitation related to IRQ freeing.
How do I fix CVE-2024-26838?
To address CVE-2024-26838, update the Linux kernel to version 5.15.150 or later for Red Hat and appropriate versions for Debian as specified.
What systems are affected by CVE-2024-26838?
CVE-2024-26838 affects multiple Linux kernel versions across Red Hat and Debian distributions.
What impact does CVE-2024-26838 have on system performance?
CVE-2024-26838 may lead to instability issues in the affected systems, particularly under specific conditions during IRQ handling.
Is there a patch available for CVE-2024-26838?
Yes, patches are available in updated kernel versions for both Red Hat and Debian systems to mitigate CVE-2024-26838.
- agent/title
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-26838
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/trending
- agent/source
- agent/description
- agent/event
- collector/nvd-api
- source/NVD
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/softwarecombine
- agent/tags
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- package-manager/redhat
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.14
- version/linux kernel/5.16
- version/linux kernel/6.2
- version/linux kernel/6.7
- version/linux kernel/6.8-rc1
- version/linux kernel/6.8-rc2
- version/linux kernel/6.8-rc3
- version/linux kernel/6.8-rc4
- version/linux kernel/6.8-rc5
- package-manager/debian