Към съдържанието
Търсене

CVE-2024-42232: Linux

9.8

CVSS 3.1

0,8%

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_monc_stop() The way the delayed work is handled in ceph_monc_stop() is prone to races with mon_fault() and possibly also finish_hunting(). Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after cancel_delayed_work_sync() runs -- __close_session() doesn't mess with the delayed work in order to avoid interfering with the hunting interval logic. This part was missed in commit b5d91704f53e ("libceph: behave in mon_fault() if cur_mon < 0") and use-after-free can still ensue on monc and objects that hang off of it, with monc->auth and monc->monmap being particularly susceptible to quickly being reused. To fix this: - clear monc->cur_mon and monc->hunting as part of closing the session in ceph_monc_stop() - bail from delayed_work() if monc->cur_mon is cleared, similar to how it's done in mon_fault() and finish_hunting() (based on monc->hunting) - call cancel_delayed_work_sync() after the session is closed

Засегнати продукти

  • Linux Linux: 0e04dc26cc594d31ee6b1382b452b6bc83b57937 преди 1177afeca833174ba83504688eec898c6214f4bf; 0e04dc26cc594d31ee6b1382b452b6bc83b57937 преди 63e5d035e3a7ab7412a008f202633c5e6a0a28ea; 0e04dc26cc594d31ee6b1382b452b6bc83b57937 преди 34b76d1922e41da1fa73d43b764cddd82ac9733c; 0e04dc26cc594d31ee6b1382b452b6bc83b57937 преди 20cf67dcb7db842f941eff1af6ee5e9dc41796d7; 0e04dc26cc594d31ee6b1382b452b6bc83b57937 преди 2d33654d40a05afd91ab24c9a73ab512a0670a9a; 0e04dc26cc594d31ee6b1382b452b6bc83b57937 преди 9525af1f58f67df387768770fcf6d6a8f23aee3d; 0e04dc26cc594d31ee6b1382b452b6bc83b57937 преди 33d38c5da17f8db2d80e811b7829d2822c10625e; 0e04dc26cc594d31ee6b1382b452b6bc83b57937 преди 69c7b2fe4c9cc1d3b1186d1c5606627ecf0de883
  • Linux Linux: 4.6; преди 4.6; 4.19.318 до 4.19.*; 5.4.280 до 5.4.*; 5.10.222 до 5.10.*; 5.15.163 до 5.15.*; 6.1.100 до 6.1.*; 6.6.41 до 6.6.*; 6.9.10 до 6.9.*; от 6.10 нататък

История

  • 7 август 2024 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2024-42232: Linux | freedomonline.bg