Description
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix Use-After-Free in ovs_ct_exit Since kfree_rcu, which is called in the hlist_for_each_entry_rcu traversal of ovs_ct_limit_exit, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free. To prevent this, it should be changed to hlist_for_each_entry_safe.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 2db9a8c0a01fa1c762c1e61a13c212c492752994affected11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 589523cf0b384164e445dd5db8d5b1bf97982424affected11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 35880c3fa6f8fe281a19975d2992644588ca33d3affected11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 9048616553c65e750d43846f225843ed745ec0d4affected11efd5cb04a184eea4f57b68ea63dddd463158d1 to < bca6fa2d9a9f560e6b89fd5190b05cc2f5d422c1affected11efd5cb04a184eea4f57b68ea63dddd463158d1 to < eaa5e164a2110d2fb9e16c8a29e4501882235137affected11efd5cb04a184eea4f57b68ea63dddd463158d1 to < edee0758747d7c219e29db9ed1d4eb33e8d32865affected11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 5ea7b72d4fac2fdbc0425cd8f2ea33abe95235b2affected
Linux Linux
Default version status: affected
4.18affected0 to < 4.18unaffected4.19.313 to ≤ 4.19.*unaffected5.4.275 to ≤ 5.4.*unaffected5.10.216 to ≤ 5.10.*unaffected5.15.158 to ≤ 5.15.*unaffected6.1.90 to ≤ 6.1.*unaffected6.6.30 to ≤ 6.6.*unaffected6.8.9 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/2db9a8c0a01fa1c762c1e61a13c212c492752994 ↗
- https://git.kernel.org/stable/c/589523cf0b384164e445dd5db8d5b1bf97982424 ↗
- https://git.kernel.org/stable/c/35880c3fa6f8fe281a19975d2992644588ca33d3 ↗
- https://git.kernel.org/stable/c/9048616553c65e750d43846f225843ed745ec0d4 ↗
- https://git.kernel.org/stable/c/bca6fa2d9a9f560e6b89fd5190b05cc2f5d422c1 ↗
- https://git.kernel.org/stable/c/eaa5e164a2110d2fb9e16c8a29e4501882235137 ↗
- https://git.kernel.org/stable/c/edee0758747d7c219e29db9ed1d4eb33e8d32865 ↗
- https://git.kernel.org/stable/c/5ea7b72d4fac2fdbc0425cd8f2ea33abe95235b2 ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html ↗