2024-05-17 14:01:01 +00:00
|
|
|
{
|
2024-05-19 11:00:34 +00:00
|
|
|
"data_version": "4.0",
|
2024-05-17 14:01:01 +00:00
|
|
|
"data_type": "CVE",
|
|
|
|
|
"data_format": "MITRE",
|
|
|
|
|
"CVE_data_meta": {
|
|
|
|
|
"ID": "CVE-2024-35934",
|
2024-05-19 11:00:34 +00:00
|
|
|
"ASSIGNER": "cve@kernel.org",
|
|
|
|
|
"STATE": "PUBLIC"
|
2024-05-17 14:01:01 +00:00
|
|
|
},
|
|
|
|
|
"description": {
|
|
|
|
|
"description_data": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
2024-05-19 11:00:34 +00:00
|
|
|
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()\n\nMany syzbot reports show extreme rtnl pressure, and many of them hint\nthat smc acquires rtnl in netns creation for no good reason [1]\n\nThis patch returns early from smc_pnet_net_init()\nif there is no netdevice yet.\n\nI am not even sure why smc_pnet_create_pnetids_list() even exists,\nbecause smc_pnet_netdev_event() is also calling\nsmc_pnet_add_base_pnetid() when handling NETDEV_UP event.\n\n[1] extract of typical syzbot reports\n\n2 locks held by syz-executor.3/12252:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878\n2 locks held by syz-executor.4/12253:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878\n2 locks held by syz-executor.1/12257:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878\n2 locks held by syz-executor.2/12261:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878\n2 locks held by syz-executor.0/12265:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878\n2 locks held by syz-executor.3/12268:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878\n2 locks held by syz-executor.4/12271:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878\n2 locks held by syz-executor.1/12274:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878\n2 locks held by syz-executor.2/12280:\n #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline]\n #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878"
|
2024-05-17 14:01:01 +00:00
|
|
|
}
|
|
|
|
|
]
|
2024-05-19 11:00:34 +00:00
|
|
|
},
|
|
|
|
|
"problemtype": {
|
|
|
|
|
"problemtype_data": [
|
|
|
|
|
{
|
|
|
|
|
"description": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
|
|
|
|
"value": "n/a"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"affects": {
|
|
|
|
|
"vendor": {
|
|
|
|
|
"vendor_data": [
|
|
|
|
|
{
|
|
|
|
|
"vendor_name": "Linux",
|
|
|
|
|
"product": {
|
|
|
|
|
"product_data": [
|
|
|
|
|
{
|
|
|
|
|
"product_name": "Linux",
|
|
|
|
|
"version": {
|
|
|
|
|
"version_data": [
|
|
|
|
|
{
|
|
|
|
|
"version_affected": "<",
|
|
|
|
|
"version_name": "1da177e4c3f4",
|
|
|
|
|
"version_value": "bc4d1ebca11b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"version_value": "not down converted",
|
|
|
|
|
"x_cve_json_5_version_data": {
|
|
|
|
|
"versions": [
|
|
|
|
|
{
|
|
|
|
|
"version": "5.10.215",
|
|
|
|
|
"lessThanOrEqual": "5.10.*",
|
|
|
|
|
"status": "unaffected",
|
2024-11-05 10:01:15 +00:00
|
|
|
"versionType": "semver"
|
2024-05-19 11:00:34 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"version": "5.15.155",
|
|
|
|
|
"lessThanOrEqual": "5.15.*",
|
|
|
|
|
"status": "unaffected",
|
2024-11-05 10:01:15 +00:00
|
|
|
"versionType": "semver"
|
2024-05-19 11:00:34 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"version": "6.1.86",
|
|
|
|
|
"lessThanOrEqual": "6.1.*",
|
|
|
|
|
"status": "unaffected",
|
2024-11-05 10:01:15 +00:00
|
|
|
"versionType": "semver"
|
2024-05-19 11:00:34 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"version": "6.6.27",
|
|
|
|
|
"lessThanOrEqual": "6.6.*",
|
|
|
|
|
"status": "unaffected",
|
2024-11-05 10:01:15 +00:00
|
|
|
"versionType": "semver"
|
2024-05-19 11:00:34 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"version": "6.8.6",
|
|
|
|
|
"lessThanOrEqual": "6.8.*",
|
|
|
|
|
"status": "unaffected",
|
2024-11-05 10:01:15 +00:00
|
|
|
"versionType": "semver"
|
2024-05-19 11:00:34 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"version": "6.9",
|
|
|
|
|
"lessThanOrEqual": "*",
|
|
|
|
|
"status": "unaffected",
|
|
|
|
|
"versionType": "original_commit_for_fix"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"defaultStatus": "affected"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"references": {
|
|
|
|
|
"reference_data": [
|
|
|
|
|
{
|
|
|
|
|
"url": "https://git.kernel.org/stable/c/bc4d1ebca11b4f194e262326bd45938e857c59d2",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://git.kernel.org/stable/c/bc4d1ebca11b4f194e262326bd45938e857c59d2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "https://git.kernel.org/stable/c/b9117dc783c0ab0a3866812f70e07bf2ea071ac4",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://git.kernel.org/stable/c/b9117dc783c0ab0a3866812f70e07bf2ea071ac4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "https://git.kernel.org/stable/c/d7ee3bf0caf599c14db0bf4af7aacd6206ef8a23",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://git.kernel.org/stable/c/d7ee3bf0caf599c14db0bf4af7aacd6206ef8a23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "https://git.kernel.org/stable/c/a2e6bffc0388526ed10406040279a693d62b36ec",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://git.kernel.org/stable/c/a2e6bffc0388526ed10406040279a693d62b36ec"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "https://git.kernel.org/stable/c/6e920422e7104928f760fc0e12b6d65ab097a2e7",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://git.kernel.org/stable/c/6e920422e7104928f760fc0e12b6d65ab097a2e7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "https://git.kernel.org/stable/c/00af2aa93b76b1bade471ad0d0525d4d29ca5cc0",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://git.kernel.org/stable/c/00af2aa93b76b1bade471ad0d0525d4d29ca5cc0"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"generator": {
|
2024-11-05 10:01:15 +00:00
|
|
|
"engine": "bippy-9e1c9544281a"
|
2024-05-17 14:01:01 +00:00
|
|
|
}
|
|
|
|
|
}
|
