Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-27394

tcp: Fix Use-After-Free in tcp_ao_connect_init

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix Use-After-Free in tcp_ao_connect_init Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal of tcp_ao_connect_init, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free. To prevent this, it should be changed to hlist_for_each_entry_safe.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7c2ffaf21bd67f73d21560995ce17eaf5fc1d37f to < ca4fb6c6764b3f75b4f5aa81db1536291897ff7faffected
  • 7c2ffaf21bd67f73d21560995ce17eaf5fc1d37f to < 80e679b352c3ce5158f3f778cfb77eb767e586fbaffected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.8.9 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References