CVE-2024-41081

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-41081
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41081.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-41081
Downstream
Related
Published
2024-07-29T15:15:15Z
Modified
2025-08-09T19:01:27Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

ila: block BH in ila_output()

As explained in commit 1378817486d6 ("tipc: block BH before using dstcache"), net/core/dstcache.c helpers need to be called with BH disabled.

ilaoutput() is called from lwtunneloutput() possibly from process context, and under rcureadlock().

We might be interrupted by a softirq, re-enter ilaoutput() and corrupt dstcache data structures.

Fix the race by using localbhdisable().

References

Affected packages