CVE-2024-46771: can: bcm: Remove proc entry when dev is unregistered.

Published Sep 18, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: Remove proc entry when dev is unregistered.

syzkaller reported a warning in bcmconnect() below. [0]

The repro calls connect() to vxcan1, removes vxcan1, and calls connect() with ifindex == 0.

Calling connect() for a BCM socket allocates a proc entry. Then, bcmsk(sk)->bound is set to 1 to prevent further connect().

However, removing the bound device resets bcmsk(sk)->bound to 0 in bcmnotify().

The 2nd connect() tries to allocate a proc entry with the same name and sets NULL to bcmsk(sk)->bcmprocread, leaking the original proc entry.

Since the proc entry is available only for connect()ed sockets, let's clean up the entry when the bound netdev is unregistered.

[0]: procdirentry 'can-bcm/2456' already registered WARNING: CPU: 1 PID: 394 at fs/proc/generic.c:376 procregister+0x645/0x8f0 fs/proc/generic.c:375 Modules linked in: CPU: 1 PID: 394 Comm: syz-executor403 Not tainted 6.10.0-rc7-g852e42cc2dd4 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 RIP: 0010:procregister+0x645/0x8f0 fs/proc/generic.c:375 Code: 00 00 00 00 00 48 85 ed 0f 85 97 02 00 00 4d 85 f6 0f 85 9f 02 00 00 48 c7 c7 9b cb cf 87 48 89 de 4c 89 fa e8 1c 6f eb fe 90 <0f> 0b 90 90 48 c7 c7 98 37 99 89 e8 cb 7e 22 05 bb 00 00 00 10 48 RSP: 0018:ffa0000000cd7c30 EFLAGS: 00010246 RAX: 9e129be1950f0200 RBX: ff1100011b51582c RCX: ff1100011857cd80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 RBP: 0000000000000000 R08: ffd400000000000f R09: ff1100013e78cac0 R10: ffac800000cd7980 R11: ff1100013e12b1f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ff1100011a99a2ec FS: 00007fbd7086f740(0000) GS:ff1100013fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200071c0 CR3: 0000000118556004 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> proccreatenetsingle+0x144/0x210 fs/proc/procnet.c:220 bcmconnect+0x472/0x840 net/can/bcm.c:1673 sysconnectfile net/socket.c:2049 [inline] sysconnect+0x5d2/0x690 net/socket.c:2066 dosysconnect net/socket.c:2076 [inline] sesysconnect net/socket.c:2073 [inline] x64sysconnect+0x8f/0x100 net/socket.c:2073 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0xd9/0x1c0 arch/x86/entry/common.c:83 entrySYSCALL64afterhwframe+0x4b/0x53 RIP: 0033:0x7fbd708b0e5d Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 9f 1b 00 f7 d8 64 89 01 48 RSP: 002b:00007fff8cd33f08 EFLAGS: 00000246 ORIGRAX: 000000000000002a RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbd708b0e5d RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000040 R09: 0000000000000040 R10: 0000000000000040 R11: 0000000000000246 R12: 00007fff8cd34098 R13: 0000000000401280 R14: 0000000000406de8 R15: 00007fbd70ab9000 </TASK> removeprocentry: removing non-empty directory 'net/can-bcm', leaking at least '2456'

Other sources

This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.

— Launchpad

Affected Software

210 affected componentsFixes available
Linux Linux kernel>=2.6.25<4.19.322
Linux Linux kernel>=4.20<5.4.284
Linux Linux kernel>=5.5<5.10.226
Linux Linux kernel>=5.11<5.15.167
Linux Linux kernel>=5.16<6.1.110
Linux Linux kernel>=6.2<6.6.51
Linux Linux kernel>=6.7<6.10.10
Linux Linux kernel=6.11-rc1
Linux Linux kernel=6.11-rc2
Linux Linux kernel=6.11-rc3
Linux Linux kernel=6.11-rc4
Linux Linux kernel=6.11-rc5
Linux Linux kernel=6.11-rc6
debian/linux
6.1.176-16.1.190-16.12.107-16.12.113-17.2.12-17.2.13-1
ubuntu/linux*
ubuntu/linux-aws<4.4.0-1143.149
4.4.0-1143.149
ubuntu/linux-azure<4.15.0-1188.203~14.04.1
4.15.0-1188.203~14.04.1
ubuntu/linux-lts-xenial<4.4.0-268.302~14.04.1
4.4.0-268.302~14.04.1
ubuntu/linux<4.4.0-268.302
4.4.0-268.302
ubuntu/linux-aws<4.4.0-1181.196
4.4.0-1181.196
ubuntu/linux-aws-hwe<4.15.0-1180.193~16.04.1
4.15.0-1180.193~16.04.1
ubuntu/linux-azure<4.15.0-1188.203~16.04.1
4.15.0-1188.203~16.04.1
ubuntu/linux-gcp<4.15.0-1173.190~16.04.1
4.15.0-1173.190~16.04.1
ubuntu/linux-hwe<4.15.0-237.249~16.04.1
4.15.0-237.249~16.04.1
ubuntu/linux-kvm<4.4.0-1144.155
4.4.0-1144.155
ubuntu/linux-oracle<4.15.0-1142.153~16.04.1
4.15.0-1142.153~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1113.120
4.4.0-1113.120
ubuntu/linux-fips*
ubuntu/linux<4.15.0-237.249
4.15.0-237.249
ubuntu/linux-aws<4.15.0-1180.193
4.15.0-1180.193
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-aws-5.4<5.4.0-1135.145~18.04.1
5.4.0-1135.145~18.04.1
ubuntu/linux-azure*
ubuntu/linux-azure-4.15<4.15.0-1188.203
4.15.0-1188.203
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-5.4<5.4.0-1140.147~18.04.1
5.4.0-1140.147~18.04.1
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-4.15<4.15.0-1173.190
4.15.0-1173.190
ubuntu/linux-gcp-5.3*
ubuntu/linux-gcp-5.4<5.4.0-1139.148~18.04.1
5.4.0-1139.148~18.04.1
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-5.4<5.4.0-200.220~18.04.1
5.4.0-200.220~18.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-ibm-5.4<5.4.0-1082.87~18.04.1
5.4.0-1082.87~18.04.1
ubuntu/linux-kvm<4.15.0-1163.168
4.15.0-1163.168
ubuntu/linux-oem*
ubuntu/linux-oracle<4.15.0-1142.153
4.15.0-1142.153
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-oracle-5.4<5.4.0-1134.143~18.04.1
5.4.0-1134.143~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1119.131~18.04.1
5.4.0-1119.131~18.04.1
ubuntu/linux-aws-fips<4.15.0-2118.124
4.15.0-2118.124
ubuntu/linux-azure-fips<4.15.0-2097.103
4.15.0-2097.103
ubuntu/linux-fips<4.15.0-1135.146
4.15.0-1135.146
ubuntu/linux-gcp-fips<4.15.0-2081.87
4.15.0-2081.87
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-200.220
5.4.0-200.220
ubuntu/linux-aws<5.4.0-1135.145
5.4.0-1135.145
ubuntu/linux-aws-5.15<5.15.0-1072.78~20.04.1
5.15.0-1072.78~20.04.1
ubuntu/linux-azure<5.4.0-1140.147
5.4.0-1140.147
ubuntu/linux-azure-5.15<5.15.0-1078.87~20.04.1
5.15.0-1078.87~20.04.1
ubuntu/linux-bluefield<5.4.0-1095.102
5.4.0-1095.102
ubuntu/linux-gcp<5.4.0-1139.148
5.4.0-1139.148
ubuntu/linux-gcp-5.15<5.15.0-1071.79~20.04.1
5.15.0-1071.79~20.04.1
ubuntu/linux-gkeop<5.4.0-1102.106
5.4.0-1102.106
ubuntu/linux-gkeop-5.15<5.15.0-1055.62~20.04.1
5.15.0-1055.62~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
ubuntu/linux-ibm<5.4.0-1082.87
5.4.0-1082.87
ubuntu/linux-ibm-5.15<5.15.0-1065.68~20.04.1
5.15.0-1065.68~20.04.1
ubuntu/linux-intel-iotg-5.15<5.15.0-1067.73~20.04.1
5.15.0-1067.73~20.04.1
ubuntu/linux-iot<5.4.0-1044.45
5.4.0-1044.45
ubuntu/linux-kvm<5.4.0-1123.131
5.4.0-1123.131
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1032.32~20.04.1
5.15.0-1032.32~20.04.1
ubuntu/linux-oracle<5.4.0-1134.143
5.4.0-1134.143
ubuntu/linux-oracle-5.15<5.15.0-1070.76~20.04.1
5.15.0-1070.76~20.04.1
ubuntu/linux-raspi<5.4.0-1119.131
5.4.0-1119.131
ubuntu/linux-riscv-5.15<5.15.0-1068.72~20.04.1
5.15.0-1068.72~20.04.1
ubuntu/linux-xilinx-zynqmp<5.4.0-1054.58
5.4.0-1054.58
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-azure-fde*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-gke*
ubuntu/linux-gke-5.15*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1135.145+fips1
5.4.0-1135.145+fips1
ubuntu/linux-azure-fips<5.4.0-1140.147+fips1
5.4.0-1140.147+fips1
ubuntu/linux-fips<5.4.0-1109.119
5.4.0-1109.119
ubuntu/linux-gcp-fips<5.4.0-1139.148+fips1
5.4.0-1139.148+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-125.135
5.15.0-125.135
ubuntu/linux-allwinner-5.19*
ubuntu/linux-aws<5.15.0-1072.78
5.15.0-1072.78
ubuntu/linux-aws-5.19*
ubuntu/linux-aws-6.2*
ubuntu/linux-aws-6.5*
ubuntu/linux-aws-6.8<6.8.0-1020.22~22.04.1
6.8.0-1020.22~22.04.1
ubuntu/linux-azure<5.15.0-1075.84
5.15.0-1075.84
ubuntu/linux-azure-5.19*
ubuntu/linux-azure-6.2*
ubuntu/linux-azure-6.5*
ubuntu/linux-azure-6.8<6.8.0-1020.23~22.04.1
6.8.0-1020.23~22.04.1
ubuntu/linux-azure-fde<5.15.0-1076.85.1
5.15.0-1076.85.1
ubuntu/linux-azure-fde-5.19*
ubuntu/linux-azure-fde-6.2*
ubuntu/linux-gcp<5.15.0-1071.79
5.15.0-1071.79
ubuntu/linux-gcp-5.19*
ubuntu/linux-gcp-6.2*
ubuntu/linux-gcp-6.5*
ubuntu/linux-gcp-6.8<6.8.0-1019.21~22.04.1
6.8.0-1019.21~22.04.1
ubuntu/linux-gke<5.15.0-1069.75
5.15.0-1069.75
ubuntu/linux-gkeop<5.15.0-1055.62
5.15.0-1055.62
ubuntu/linux-hwe-5.19*
ubuntu/linux-hwe-6.2*
ubuntu/linux-hwe-6.5*
ubuntu/linux-hwe-6.8<6.8.0-50.51~22.04.1
6.8.0-50.51~22.04.1
ubuntu/linux-ibm<5.15.0-1065.68
5.15.0-1065.68
ubuntu/linux-ibm-6.8<6.8.0-1017.17~22.04.1
6.8.0-1017.17~22.04.1
ubuntu/linux-intel-iotg<5.15.0-1067.73
5.15.0-1067.73
ubuntu/linux-kvm<5.15.0-1069.74
5.15.0-1069.74
ubuntu/linux-lowlatency<5.15.0-125.135
5.15.0-125.135
ubuntu/linux-lowlatency-hwe-5.19*
ubuntu/linux-lowlatency-hwe-6.2*
ubuntu/linux-lowlatency-hwe-6.5*
ubuntu/linux-lowlatency-hwe-6.8<6.8.0-50.51.1~22.04.1
6.8.0-50.51.1~22.04.1
ubuntu/linux-nvidia<5.15.0-1067.68
5.15.0-1067.68
ubuntu/linux-nvidia-6.2*
ubuntu/linux-nvidia-6.5*
ubuntu/linux-nvidia-6.8<6.8.0-1019.21~22.04.1
6.8.0-1019.21~22.04.1
ubuntu/linux-nvidia-tegra<5.15.0-1032.32
5.15.0-1032.32
ubuntu/linux-nvidia-tegra-igx<5.15.0-1020.20
5.15.0-1020.20
ubuntu/linux-oem-5.17*
ubuntu/linux-oem-6.0*
ubuntu/linux-oem-6.1*
ubuntu/linux-oem-6.5*
ubuntu/linux-oracle<5.15.0-1070.76
5.15.0-1070.76
ubuntu/linux-oracle-6.5*
ubuntu/linux-oracle-6.8<6.8.0-1017.18~22.04.1
6.8.0-1017.18~22.04.1
ubuntu/linux-raspi<5.15.0-1065.68
5.15.0-1065.68
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.19*
ubuntu/linux-riscv-6.5*
ubuntu/linux-riscv-6.8<6.8.0-50.51.1~22.04.1
6.8.0-50.51.1~22.04.1
ubuntu/linux-starfive-5.19*
ubuntu/linux-starfive-6.2*
ubuntu/linux-starfive-6.5*
ubuntu/linux-xilinx-zynqmp<5.15.0-1038.42
5.15.0-1038.42
ubuntu/linux-bluefield<5.15.0-1056.58
5.15.0-1056.58
ubuntu/linux-intel-iot-realtime<5.15.0-1066.68
5.15.0-1066.68
ubuntu/linux-realtime<5.15.0-1073.81
5.15.0-1073.81
ubuntu/linux-realtime-6.8<6.8.1-1013.14~22.04.1
6.8.1-1013.14~22.04.1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux-aws-fips<5.15.0-1072.78+fips1
5.15.0-1072.78+fips1
ubuntu/linux-azure-fips<5.15.0-1075.84+fips1
5.15.0-1075.84+fips1
ubuntu/linux-fips<5.15.0-125.135+fips1
5.15.0-125.135+fips1
ubuntu/linux-gcp-fips<5.15.0-1071.79+fips1
5.15.0-1071.79+fips1
ubuntu/linux<6.8.0-50.51
6.8.0-50.51
ubuntu/linux-aws<6.8.0-1020.22
6.8.0-1020.22
ubuntu/linux-azure<6.8.0-1020.23
6.8.0-1020.23
ubuntu/linux-gcp<6.8.0-1019.21
6.8.0-1019.21
ubuntu/linux-gke<6.8.0-1015.19
6.8.0-1015.19
ubuntu/linux-gkeop<6.8.0-1002.4
6.8.0-1002.4
ubuntu/linux-ibm<6.8.0-1017.17
6.8.0-1017.17
ubuntu/linux-lowlatency<6.8.0-50.51.1
6.8.0-50.51.1
ubuntu/linux-nvidia<6.8.0-1019.21
6.8.0-1019.21
ubuntu/linux-nvidia-lowlatency<6.8.0-1019.21.1
6.8.0-1019.21.1
ubuntu/linux-oem-6.8<6.8.0-1018.18
6.8.0-1018.18
ubuntu/linux-oracle<6.8.0-1017.18
6.8.0-1017.18
ubuntu/linux-raspi<6.8.0-1016.18
6.8.0-1016.18
ubuntu/linux-riscv<6.8.0-50.51.1
6.8.0-50.51.1
ubuntu/linux-xilinx<6.8.0-1017.18
6.8.0-1017.18
ubuntu/linux-raspi-realtime<6.8.0-2015.16
6.8.0-2015.16
ubuntu/linux-realtime<6.8.1-1013.14
6.8.1-1013.14
ubuntu/linux-fips<6.8.0-78.78+fips1
6.8.0-78.78+fips1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
  2. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1143.149
  3. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1188.203~14.04.1
  4. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-268.302~14.04.1
  5. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-268.302
  6. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1181.196
  7. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1180.193~16.04.1
  8. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1188.203~16.04.1
  9. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1173.190~16.04.1
  10. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-237.249~16.04.1
  11. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1144.155
  12. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1142.153~16.04.1
  13. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1113.120
  14. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-237.249
  15. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1180.193
  16. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.145~18.04.1
  17. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1188.203
  18. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1140.147~18.04.1
  19. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1173.190
  20. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1139.148~18.04.1
  21. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-200.220~18.04.1
  22. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1082.87~18.04.1
  23. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1163.168
  24. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1142.153
  25. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.143~18.04.1
  26. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1119.131~18.04.1
  27. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2118.124
  28. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2097.103
  29. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1135.146
  30. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2081.87
  31. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-200.220
  32. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.145
  33. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.78~20.04.1
  34. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1140.147
  35. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1078.87~20.04.1
  36. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1095.102
  37. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1139.148
  38. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79~20.04.1
  39. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1102.106
  40. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.62~20.04.1
  41. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  42. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1082.87
  43. Upgrade

    Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.73~20.04.1
  45. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1044.45
  46. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1123.131
  47. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  48. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1032.32~20.04.1
  49. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.143
  50. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.76~20.04.1
  51. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1119.131
  52. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.72~20.04.1
  53. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1054.58
  54. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.145+fips1
  55. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1140.147+fips1
  56. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1109.119
  57. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1139.148+fips1
  58. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  59. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.78
  60. Upgrade

    Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.22~22.04.1
  61. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1075.84
  62. Upgrade

    Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.23~22.04.1
  63. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1076.85.1
  64. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79
  65. Upgrade

    Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21~22.04.1
  66. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.75
  67. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.62
  68. Upgrade

    Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51~22.04.1
  69. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68
  70. Upgrade

    Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.17~22.04.1
  71. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.73
  72. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.74
  73. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  74. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51.1~22.04.1
  75. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.68
  76. Upgrade

    Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21~22.04.1
  77. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 5.15.0-1032.32
  78. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.

    Fixed in 5.15.0-1020.20
  79. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.76
  80. Upgrade

    Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.18~22.04.1
  81. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68
  82. Upgrade

    Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51.1~22.04.1
  83. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1038.42
  84. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1056.58
  85. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1066.68
  86. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1073.81
  87. Upgrade

    Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.1-1013.14~22.04.1
  88. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.78+fips1
  89. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1075.84+fips1
  90. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135+fips1
  91. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79+fips1
  92. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51
  93. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.22
  94. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.23
  95. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21
  96. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 6.8.0-1015.19
  97. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 6.8.0-1002.4
  98. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.17
  99. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51.1
  100. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21
  101. Upgrade

    Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21.1
  102. Upgrade

    Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1018.18
  103. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.18
  104. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 6.8.0-1016.18
  105. Upgrade

    Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51.1
  106. Upgrade

    Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.18
  107. Upgrade

    Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.0-2015.16
  108. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.1-1013.14
  109. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-78.78+fips1
  110. Compensating control

    Apply the upstream Linux kernel fix so that in can-bcm, the proc entry created for connect()-allocated BCM sockets is removed/cleaned up when the bound netdev is unregistered (prevents bcm_proc_read being NULLed while the original proc entry remains, causing a proc_dir_entry like 'can-bcm/2456' to remain and trigger 'already registered' / leaking warnings).

Event History

Sep 18, 2024
CVE Published
via MITRE·07:12 AM
Data Sourced
via MITRE·07:12 AM
DescriptionSeverity
Data Sourced
via OSV·08:15 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·08:15 AM
RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2024-46771?

CVE-2024-46771 has a high severity level due to potential impacts on kernel stability and security.

2

How do I fix CVE-2024-46771?

To fix CVE-2024-46771, update your Linux kernel to versions 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.

3

Which Linux kernel versions are affected by CVE-2024-46771?

Affected Linux kernel versions are from 2.6.25 up to 6.1.110, beyond which the vulnerability is resolved.

4

What does CVE-2024-46771 affect in the Linux kernel?

CVE-2024-46771 affects the CAN interface, specifically related to processing warnings when a device is unregistered.

5

Is there a workaround for CVE-2024-46771 if I cannot update?

There are no specific workarounds for CVE-2024-46771; updating to a fixed version is recommended.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203