In the Linux kernel, the following vulnerability has been resolved:
net: Fix an unsafe loop on the list
The kernel may crash when deleting a genetlink family if there are still listeners for that family:
Oops: Kernel access of bad area, sig: 11 [#1] ... NIP [c000000000c080bc] netlinkupdatesocketmc+0x3c/0xc0 LR [c000000000c0f764] _netlinkclearmulticastusers+0x74/0xc0 Call Trace: _netlinkclearmulticastusers+0x74/0xc0 genlunregister_family+0xd4/0x2d0
Change the unsafe loop on the list to a safe one, because inside the loop there is an element removal from this list.
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dae9f1187189bc09ff6d25ca97ead711f7e26f9",
"digest": {
"line_hashes": [
"320104986628787138115253664451161970739",
"100684260106225794858376457353104361640",
"151466942972001031402739781535836559427",
"151993092084730135831512752428891399397",
"81633868796249496921190861022108577464"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-12ed060b"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "include/net/sock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e0766fcf37ad8eed289dd3853628dd9b01b58b0",
"digest": {
"line_hashes": [
"301874891733441954103690909856486972297",
"54187814159581946948356009609234838789",
"55773197039709006304614607945067025861",
"236355097351801655324039400898492238233"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-140d05e3"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "include/net/sock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5f03a7f601f33cda1f710611625235dc86fd8a9e",
"digest": {
"line_hashes": [
"139004978503770473199288512903332663545",
"220218849058120517529011935741453522184",
"156944932468999968230578776968138913504",
"198925231736765157118238791835468039980"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-1bab4bb2"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c",
"function": "__netlink_clear_multicast_users"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cdec792b2450105b1314c5123a9a0452cb2c2f0",
"digest": {
"length": 214.0,
"function_hash": "182522101115655495864318065107762109704"
},
"id": "CVE-2024-50024-279186f0"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "include/net/sock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3be342e0332a7c83eb26fbb22bf156fdca467a5d",
"digest": {
"line_hashes": [
"139004978503770473199288512903332663545",
"220218849058120517529011935741453522184",
"156944932468999968230578776968138913504",
"198925231736765157118238791835468039980"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-2a1ea519"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3be342e0332a7c83eb26fbb22bf156fdca467a5d",
"digest": {
"line_hashes": [
"320104986628787138115253664451161970739",
"100684260106225794858376457353104361640",
"151466942972001031402739781535836559427",
"151993092084730135831512752428891399397",
"81633868796249496921190861022108577464"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-339d8700"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "include/net/sock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd",
"digest": {
"line_hashes": [
"301874891733441954103690909856486972297",
"54187814159581946948356009609234838789",
"55773197039709006304614607945067025861",
"236355097351801655324039400898492238233"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-37898a97"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c",
"function": "__netlink_clear_multicast_users"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68ad5da6ca630a276f0a5c924179e57724d00013",
"digest": {
"length": 214.0,
"function_hash": "182522101115655495864318065107762109704"
},
"id": "CVE-2024-50024-3cd78090"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "include/net/sock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dae9f1187189bc09ff6d25ca97ead711f7e26f9",
"digest": {
"line_hashes": [
"301874891733441954103690909856486972297",
"54187814159581946948356009609234838789",
"55773197039709006304614607945067025861",
"236355097351801655324039400898492238233"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-3e114856"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "include/net/sock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cdec792b2450105b1314c5123a9a0452cb2c2f0",
"digest": {
"line_hashes": [
"301874891733441954103690909856486972297",
"54187814159581946948356009609234838789",
"55773197039709006304614607945067025861",
"236355097351801655324039400898492238233"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-4319989c"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68ad5da6ca630a276f0a5c924179e57724d00013",
"digest": {
"line_hashes": [
"320104986628787138115253664451161970739",
"100684260106225794858376457353104361640",
"151466942972001031402739781535836559427",
"151993092084730135831512752428891399397",
"81633868796249496921190861022108577464"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-577bd8ac"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c",
"function": "__netlink_clear_multicast_users"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd",
"digest": {
"length": 214.0,
"function_hash": "182522101115655495864318065107762109704"
},
"id": "CVE-2024-50024-5983857b"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cdec792b2450105b1314c5123a9a0452cb2c2f0",
"digest": {
"line_hashes": [
"320104986628787138115253664451161970739",
"100684260106225794858376457353104361640",
"151466942972001031402739781535836559427",
"151993092084730135831512752428891399397",
"81633868796249496921190861022108577464"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-5ff6d0b0"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c",
"function": "__netlink_clear_multicast_users"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3be342e0332a7c83eb26fbb22bf156fdca467a5d",
"digest": {
"length": 214.0,
"function_hash": "182522101115655495864318065107762109704"
},
"id": "CVE-2024-50024-7581983f"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd",
"digest": {
"line_hashes": [
"320104986628787138115253664451161970739",
"100684260106225794858376457353104361640",
"151466942972001031402739781535836559427",
"151993092084730135831512752428891399397",
"81633868796249496921190861022108577464"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-836162b6"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5f03a7f601f33cda1f710611625235dc86fd8a9e",
"digest": {
"line_hashes": [
"320104986628787138115253664451161970739",
"100684260106225794858376457353104361640",
"151466942972001031402739781535836559427",
"151993092084730135831512752428891399397",
"81633868796249496921190861022108577464"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-8d5adb24"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c",
"function": "__netlink_clear_multicast_users"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5f03a7f601f33cda1f710611625235dc86fd8a9e",
"digest": {
"length": 214.0,
"function_hash": "182522101115655495864318065107762109704"
},
"id": "CVE-2024-50024-a2a4b087"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e0766fcf37ad8eed289dd3853628dd9b01b58b0",
"digest": {
"line_hashes": [
"320104986628787138115253664451161970739",
"100684260106225794858376457353104361640",
"151466942972001031402739781535836559427",
"151993092084730135831512752428891399397",
"81633868796249496921190861022108577464"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-d035db44"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c",
"function": "__netlink_clear_multicast_users"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e0766fcf37ad8eed289dd3853628dd9b01b58b0",
"digest": {
"length": 214.0,
"function_hash": "182522101115655495864318065107762109704"
},
"id": "CVE-2024-50024-d571efe4"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/netlink/af_netlink.c",
"function": "__netlink_clear_multicast_users"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dae9f1187189bc09ff6d25ca97ead711f7e26f9",
"digest": {
"length": 214.0,
"function_hash": "182522101115655495864318065107762109704"
},
"id": "CVE-2024-50024-e0b647e1"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "include/net/sock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68ad5da6ca630a276f0a5c924179e57724d00013",
"digest": {
"line_hashes": [
"301874891733441954103690909856486972297",
"54187814159581946948356009609234838789",
"55773197039709006304614607945067025861",
"236355097351801655324039400898492238233"
],
"threshold": 0.9
},
"id": "CVE-2024-50024-f05b0577"
}
]