CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free()
In the Linux kernel, the following vulnerability has been resolved:
sockmap: Add a condresched() in sockhashfree()
Several syzbot soft lockup reports all have in common sockhashfree()
If a map with a large number of buckets is destroyed, we need to yield the cpu when needed.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47710?
CVE-2024-47710 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-47710?
To fix CVE-2024-47710, you should upgrade to a patched version of the Linux kernel, specifically versions 6.1.123-1 or 6.12.12-1 and later.
Which versions of the Linux kernel are affected by CVE-2024-47710?
CVE-2024-47710 affects Linux kernel versions from 5.4.49 to 6.10.13.
What specific function is associated with CVE-2024-47710?
CVE-2024-47710 is associated with the sock_hash_free() function in the Linux kernel.
What type of issues does CVE-2024-47710 address?
CVE-2024-47710 addresses issues related to potential soft lockups when destroying a map with a large number of buckets.