In the Linux kernel, the following vulnerability has been resolved:
net: gtp: Fix Use-After-Free in gtp_dellink
Since callrcu, which is called in the hlistforeachentryrcu traversal of gtpdellink, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free.
To prevent this, it should be changed to hlistforeachentrysafe.
[
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"14239935849589029708632459594570854087",
"139421256235285573137748252923741096218",
"328736513087387214398738345488006427265",
"48481259079107713126754044221184113685",
"154930943929700026376510395192497765371",
"90827322540438557857477536842384809440",
"269809253897857987607604355347630252950",
"207864439020729917735003640736405886574"
]
},
"id": "CVE-2024-27396-067246e0",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2a904107ee2b647bb7794a1a82b67740d7c8a64",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"14239935849589029708632459594570854087",
"139421256235285573137748252923741096218",
"328736513087387214398738345488006427265",
"48481259079107713126754044221184113685",
"154930943929700026376510395192497765371",
"90827322540438557857477536842384809440",
"269809253897857987607604355347630252950",
"207864439020729917735003640736405886574"
]
},
"id": "CVE-2024-27396-1190a88c",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0caff3e6390f840666b8dc1ecebf985c2ef3f1dd",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c",
"function": "gtp_dellink"
},
"digest": {
"function_hash": "330840148335111128684872155094935828332",
"length": 320.0
},
"id": "CVE-2024-27396-1d236433",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2a904107ee2b647bb7794a1a82b67740d7c8a64",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c",
"function": "gtp_dellink"
},
"digest": {
"function_hash": "330840148335111128684872155094935828332",
"length": 320.0
},
"id": "CVE-2024-27396-2d690d9c",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd957d1716ec979d8f5bf38fc659aeb9fdaa2474",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"14239935849589029708632459594570854087",
"139421256235285573137748252923741096218",
"328736513087387214398738345488006427265",
"48481259079107713126754044221184113685",
"154930943929700026376510395192497765371",
"90827322540438557857477536842384809440",
"269809253897857987607604355347630252950",
"207864439020729917735003640736405886574"
]
},
"id": "CVE-2024-27396-3d0225cf",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd957d1716ec979d8f5bf38fc659aeb9fdaa2474",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c",
"function": "gtp_dellink"
},
"digest": {
"function_hash": "330840148335111128684872155094935828332",
"length": 320.0
},
"id": "CVE-2024-27396-4517e435",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2aacd4de45477582993f8a8abb9505a06426bfb6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"14239935849589029708632459594570854087",
"139421256235285573137748252923741096218",
"328736513087387214398738345488006427265",
"48481259079107713126754044221184113685",
"154930943929700026376510395192497765371",
"90827322540438557857477536842384809440",
"269809253897857987607604355347630252950",
"207864439020729917735003640736405886574"
]
},
"id": "CVE-2024-27396-67071102",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e74b3fd6bf542349758f283676dff3660327c07",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c",
"function": "gtp_dellink"
},
"digest": {
"function_hash": "330840148335111128684872155094935828332",
"length": 320.0
},
"id": "CVE-2024-27396-828b9407",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0caff3e6390f840666b8dc1ecebf985c2ef3f1dd",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"14239935849589029708632459594570854087",
"139421256235285573137748252923741096218",
"328736513087387214398738345488006427265",
"48481259079107713126754044221184113685",
"154930943929700026376510395192497765371",
"90827322540438557857477536842384809440",
"269809253897857987607604355347630252950",
"207864439020729917735003640736405886574"
]
},
"id": "CVE-2024-27396-8e0b0a12",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2aacd4de45477582993f8a8abb9505a06426bfb6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"14239935849589029708632459594570854087",
"139421256235285573137748252923741096218",
"328736513087387214398738345488006427265",
"48481259079107713126754044221184113685",
"154930943929700026376510395192497765371",
"90827322540438557857477536842384809440",
"238233365776326546354356523908102762665",
"269712389624445781236133676538070135836"
]
},
"id": "CVE-2024-27396-b4e2cce0",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07b20d0a3dc13fb1adff10b60021a4924498da58",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c",
"function": "gtp_dellink"
},
"digest": {
"function_hash": "63767209592873240163412777919615329542",
"length": 339.0
},
"id": "CVE-2024-27396-c84f706f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07b20d0a3dc13fb1adff10b60021a4924498da58",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"14239935849589029708632459594570854087",
"139421256235285573137748252923741096218",
"328736513087387214398738345488006427265",
"48481259079107713126754044221184113685",
"154930943929700026376510395192497765371",
"90827322540438557857477536842384809440",
"269809253897857987607604355347630252950",
"207864439020729917735003640736405886574"
]
},
"id": "CVE-2024-27396-ca94f863",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@718df1bc226c383dd803397d7f5d95557eb81ac7",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c",
"function": "gtp_dellink"
},
"digest": {
"function_hash": "330840148335111128684872155094935828332",
"length": 320.0
},
"id": "CVE-2024-27396-cac9a3c5",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@718df1bc226c383dd803397d7f5d95557eb81ac7",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c",
"function": "gtp_dellink"
},
"digest": {
"function_hash": "330840148335111128684872155094935828332",
"length": 320.0
},
"id": "CVE-2024-27396-e97ce245",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25a1c2d4b1fcf938356a9688a96a6456abd44b29",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c",
"function": "gtp_dellink"
},
"digest": {
"function_hash": "330840148335111128684872155094935828332",
"length": 320.0
},
"id": "CVE-2024-27396-fb3c01f1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e74b3fd6bf542349758f283676dff3660327c07",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/gtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"14239935849589029708632459594570854087",
"139421256235285573137748252923741096218",
"328736513087387214398738345488006427265",
"48481259079107713126754044221184113685",
"154930943929700026376510395192497765371",
"90827322540438557857477536842384809440",
"269809253897857987607604355347630252950",
"207864439020729917735003640736405886574"
]
},
"id": "CVE-2024-27396-fe8cf4d4",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25a1c2d4b1fcf938356a9688a96a6456abd44b29",
"signature_version": "v1"
}
]