CVE-2024-35880: io_uring/kbuf: hold io_buffer_list reference over mmap
In the Linux kernel, the following vulnerability has been resolved:
iouring/kbuf: hold iobufferlist reference over mmap
If we look up the kbuf, ensure that it doesn't get unregistered until after we're done with it. Since we're inside mmap, we cannot safely use the iouring lock. Rely on the fact that we can lookup the buffer list under RCU now and grab a reference to it, preventing it from being unregistered until we're done with it. The lookup returns the iobufferlist directly with it referenced.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
iouring/kbuf: hold iobufferlist reference over mmap
The Linux kernel CVE team has assigned CVE-2024-35880 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051944-CVE-2024-35880-6ffb@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.26 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8.5 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35880?
CVE-2024-35880 has a high severity rating due to its potential impact on the Linux kernel's memory management.
How do I fix CVE-2024-35880?
To fix CVE-2024-35880, update your Linux kernel to version 6.6.26 or later for Red Hat and specific versions for Debian as listed in the advisory.
Which software versions are affected by CVE-2024-35880?
CVE-2024-35880 affects various Linux kernel versions listed in the advisory, including older releases before the recommended updates.
What systems are impacted by CVE-2024-35880?
Systems running affected versions of the Linux kernel are vulnerable to CVE-2024-35880, particularly those using io_uring functionalities.
Is there a workaround for CVE-2024-35880?
Currently, the recommended solution for CVE-2024-35880 is to apply the necessary kernel updates rather than relying on workarounds.