CVE-2024-57900: ila: serialize calls to nf_register_net_hooks()
ila: serialize calls to nfregisternethooks()
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 031ae72825ce - Configuration
Add/use a mutex so that at most one thread is calling nf_register_net_hooks(), to prevent the KASAN slab-use-after-free race seen in syzbot (ila_add_mapping()).
Linux kernel ILA (net/ipv6/ila/ila_xlat.c / netfilter nf_register_net_hooks()) Serialize concurrent calls to nf_register_net_hooks() using a mutex = enable
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57900?
CVE-2024-57900 is associated with a race condition in the Linux kernel which could lead to potential security vulnerabilities.
How do I fix CVE-2024-57900?
To fix CVE-2024-57900, you should update the Linux kernel to a patched version that addresses the vulnerability.
Which Linux kernel versions are affected by CVE-2024-57900?
CVE-2024-57900 affects Linux kernel versions between 4.5 and 6.12.9, including several release candidates.
What components are involved in CVE-2024-57900?
CVE-2024-57900 involves the 'ila' subsystem and the netfilter framework within the Linux kernel.
Is CVE-2024-57900 easy to exploit?
The exploitability of CVE-2024-57900 depends on the specific environment and usage of the affected kernel code.