In the Linux kernel, the following vulnerability has been resolved: net: let net.core.devweight always be non-zero The following problem was encountered during stability test: (NULL netdevice): NAPI poll function processbacklog+0x0/0x530 \ returned 1, exceeding its budget of 0. ------------[ cut here ]------------ listadd double add: new=ffff88905f746f48, prev=ffff88905f746f48, \ next=ffff88905f746e40. WARNING: CPU: 18 PID: 5462 at lib/listdebug.c:35 \ listaddvalidorreport+0xf3/0x130 CPU: 18 UID: 0 PID: 5462 Comm: ping Kdump: loaded Not tainted 6.13.0-rc7+ RIP: 0010:listaddvalidorreport+0xf3/0x130 Call Trace: ? _warn+0xcd/0x250 ? _listaddvalidorreport+0xf3/0x130 enqueuetobacklog+0x923/0x1070 netifrxinternal+0x92/0x2b0 _netifrx+0x15/0x170 loopbackxmit+0x2ef/0x450 devhardstartxmit+0x103/0x490 _devqueuexmit+0xeac/0x1950 ipfinishoutput2+0x6cc/0x1620 ipoutput+0x161/0x270 ippushpendingframes+0x155/0x1a0 rawsendmsg+0xe13/0x1550 _syssendto+0x3bf/0x4e0 _x64syssendto+0xdc/0x1b0 dosyscall64+0x5b/0x170 entrySYSCALL64afterhwframe+0x76/0x7e The reproduction command is as follows: sysctl -w net.core.devweight=0 ping 127.0.0.1 This is because when the napi's weight is set to 0, processbacklog() may return 0 and clear the NAPISTATESCHED bit of napi->state, causing this napi to be re-polled in netrxaction() until _dosoftirq() times out. Since the NAPISTATESCHED bit has been cleared, napischedulerps() can be retriggered in enqueuetobacklog(), causing this issue. Making the napi's weight always non-zero solves this problem. Triggering this issue requires system-wide admin (setting is not namespaced).
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "6.14.0-7.7", "binary_name": "linux-bpf-dev" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-buildinfo-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-buildinfo-6.14.0-7-generic-64k" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-cloud-tools-6.14.0-7" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-cloud-tools-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-cloud-tools-common" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-doc" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-headers-6.14.0-7" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-headers-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-headers-6.14.0-7-generic-64k" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-image-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-image-6.14.0-7-generic-dbgsym" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-image-unsigned-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-image-unsigned-6.14.0-7-generic-64k" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-image-unsigned-6.14.0-7-generic-64k-dbgsym" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-image-unsigned-6.14.0-7-generic-dbgsym" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-lib-rust-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-libc-dev" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-modules-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-modules-6.14.0-7-generic-64k" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-modules-extra-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-modules-usbio-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-modules-vision-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-source-6.14.0" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-tools-6.14.0-7" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-tools-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-tools-6.14.0-7-generic-64k" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-tools-common" }, { "binary_version": "6.14.0-7.7", "binary_name": "linux-tools-host" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "6.14.0-1003.3", "binary_name": "linux-aws-cloud-tools-6.14.0-1003" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-aws-headers-6.14.0-1003" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-aws-tools-6.14.0-1003" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-buildinfo-6.14.0-1003-aws" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-cloud-tools-6.14.0-1003-aws" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-headers-6.14.0-1003-aws" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-image-unsigned-6.14.0-1003-aws" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-image-unsigned-6.14.0-1003-aws-dbgsym" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-modules-6.14.0-1003-aws" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-modules-extra-6.14.0-1003-aws" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-tools-6.14.0-1003-aws" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "6.14.0-1002.2", "binary_name": "linux-azure-cloud-tools-6.14.0-1002" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-azure-headers-6.14.0-1002" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-azure-tools-6.14.0-1002" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-buildinfo-6.14.0-1002-azure" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-cloud-tools-6.14.0-1002-azure" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-headers-6.14.0-1002-azure" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-azure" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-azure-dbgsym" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-6.14.0-1002-azure" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-extra-6.14.0-1002-azure" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-tools-6.14.0-1002-azure" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "6.14.0-1002.2", "binary_name": "linux-buildinfo-6.14.0-1002-gcp" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-buildinfo-6.14.0-1002-gcp-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-gcp-headers-6.14.0-1002" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-gcp-tools-6.14.0-1002" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-headers-6.14.0-1002-gcp" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-headers-6.14.0-1002-gcp-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-gcp" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-gcp-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-gcp-64k-dbgsym" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-gcp-dbgsym" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-6.14.0-1002-gcp" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-6.14.0-1002-gcp-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-extra-6.14.0-1002-gcp" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-extra-6.14.0-1002-gcp-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-tools-6.14.0-1002-gcp" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-tools-6.14.0-1002-gcp-64k" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "6.14.0-1002.2", "binary_name": "linux-buildinfo-6.14.0-1002-oracle" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-buildinfo-6.14.0-1002-oracle-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-headers-6.14.0-1002-oracle" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-headers-6.14.0-1002-oracle-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-oracle" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-oracle-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-oracle-64k-dbgsym" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-image-unsigned-6.14.0-1002-oracle-dbgsym" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-6.14.0-1002-oracle" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-6.14.0-1002-oracle-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-extra-6.14.0-1002-oracle" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-modules-extra-6.14.0-1002-oracle-64k" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-oracle-headers-6.14.0-1002" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-oracle-tools-6.14.0-1002" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-tools-6.14.0-1002-oracle" }, { "binary_version": "6.14.0-1002.2", "binary_name": "linux-tools-6.14.0-1002-oracle-64k" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "6.14.0-1003.3", "binary_name": "linux-buildinfo-6.14.0-1003-raspi" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-headers-6.14.0-1003-raspi" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-image-6.14.0-1003-raspi" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-image-6.14.0-1003-raspi-dbgsym" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-modules-6.14.0-1003-raspi" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-raspi-headers-6.14.0-1003" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-raspi-tools-6.14.0-1003" }, { "binary_version": "6.14.0-1003.3", "binary_name": "linux-tools-6.14.0-1003-raspi" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "6.14.0-1001.1", "binary_name": "linux-buildinfo-6.14.0-1001-realtime" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-cloud-tools-6.14.0-1001-realtime" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-headers-6.14.0-1001-realtime" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-image-unsigned-6.14.0-1001-realtime" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-image-unsigned-6.14.0-1001-realtime-dbgsym" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-modules-6.14.0-1001-realtime" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-modules-extra-6.14.0-1001-realtime" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-modules-iwlwifi-6.14.0-1001-realtime" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-realtime-cloud-tools-6.14.0-1001" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-realtime-headers-6.14.0-1001" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-realtime-tools-6.14.0-1001" }, { "binary_version": "6.14.0-1001.1", "binary_name": "linux-tools-6.14.0-1001-realtime" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "6.14.0-7.7.1", "binary_name": "linux-buildinfo-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7.1", "binary_name": "linux-headers-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7.1", "binary_name": "linux-image-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7.1", "binary_name": "linux-image-6.14.0-7-generic-dbgsym" }, { "binary_version": "6.14.0-7.7.1", "binary_name": "linux-modules-6.14.0-7-generic" }, { "binary_version": "6.14.0-7.7.1", "binary_name": "linux-riscv-headers-6.14.0-7" }, { "binary_version": "6.14.0-7.7.1", "binary_name": "linux-riscv-tools-6.14.0-7" }, { "binary_version": "6.14.0-7.7.1", "binary_name": "linux-tools-6.14.0-7-generic" } ] }