Description
In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal of gtp_dellink, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free. To prevent this, it should be changed to hlist_for_each_entry_safe.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
043a283d24f40fea4c8a8d06b0e2694c8e372200 to < 07b20d0a3dc13fb1adff10b60021a4924498da58affectedc185e1d6e2752a4b656c3ca878c525fa11f55757 to < 718df1bc226c383dd803397d7f5d95557eb81ac7affected94dc550a5062030569d4aa76e10e50c8fc001930 to < 0caff3e6390f840666b8dc1ecebf985c2ef3f1ddaffected94dc550a5062030569d4aa76e10e50c8fc001930 to < 2e74b3fd6bf542349758f283676dff3660327c07affected94dc550a5062030569d4aa76e10e50c8fc001930 to < 25a1c2d4b1fcf938356a9688a96a6456abd44b29affected94dc550a5062030569d4aa76e10e50c8fc001930 to < 2aacd4de45477582993f8a8abb9505a06426bfb6affected94dc550a5062030569d4aa76e10e50c8fc001930 to < cd957d1716ec979d8f5bf38fc659aeb9fdaa2474affected94dc550a5062030569d4aa76e10e50c8fc001930 to < f2a904107ee2b647bb7794a1a82b67740d7c8a64affecteda29c4303930bc0c25ae6a4f365dcdef71447b4eaaffected4.19.93 to < 4.19.313affected5.4.8 to < 5.4.275affected4.14.162 to < 4.15affected
Linux Linux
Default version status: affected
5.5affected0 to < 5.5unaffected4.19.313 to ≤ 4.19.*unaffected5.4.275 to ≤ 5.4.*unaffected5.10.216 to ≤ 5.10.*unaffected5.15.158 to ≤ 5.15.*unaffected6.1.90 to ≤ 6.1.*unaffected6.6.30 to ≤ 6.6.*unaffected6.8.9 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/07b20d0a3dc13fb1adff10b60021a4924498da58 ↗
- https://git.kernel.org/stable/c/718df1bc226c383dd803397d7f5d95557eb81ac7 ↗
- https://git.kernel.org/stable/c/0caff3e6390f840666b8dc1ecebf985c2ef3f1dd ↗
- https://git.kernel.org/stable/c/2e74b3fd6bf542349758f283676dff3660327c07 ↗
- https://git.kernel.org/stable/c/25a1c2d4b1fcf938356a9688a96a6456abd44b29 ↗
- https://git.kernel.org/stable/c/2aacd4de45477582993f8a8abb9505a06426bfb6 ↗
- https://git.kernel.org/stable/c/cd957d1716ec979d8f5bf38fc659aeb9fdaa2474 ↗
- https://git.kernel.org/stable/c/f2a904107ee2b647bb7794a1a82b67740d7c8a64 ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html ↗