CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init()
In the Linux kernel, the following vulnerability has been resolved:
pktgen: use cpusreadlock() in pgnetinit()
I have seen the WARNON(smpprocessorid() != cpu) firing in pktgenthreadworker() during tests.
We must use cpusreadlock()/cpusreadunlock() around the foreachonlinecpu(cpu) loop.
While we are at it use WARNONONCE() to avoid a possible syslog flood.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46681?
CVE-2024-46681 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-46681?
To fix CVE-2024-46681, update the Linux kernel to version 6.12.11-1 or newer.
Which versions of the Linux kernel are affected by CVE-2024-46681?
CVE-2024-46681 affects Linux kernel versions from 2.6.12 up to 6.10.8, including specific release candidates of 6.11.
What causes the issue in CVE-2024-46681?
The issue in CVE-2024-46681 is caused by improper locking in the pktgen module, leading to potential inconsistencies.
Is my Linux kernel vulnerable based on my version?
If your Linux kernel version is between 2.6.12 and 6.10.8 or one of the 6.11 release candidates, it is vulnerable to CVE-2024-46681.