mac802154: Fix potential RCU dereference issue in mac802154_scan_worker (Linux Linux)

CVE-2024-50005
HIGH 7.8

En bref

Source
NVD
EPSS
EPSS 0.22 % · centile 13 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154_scan_worker In the `mac802154_scan_worker` function, the `scan_req->type` field was accessed after the RCU read-side critical section was unlocked. According to RCU usage rules, this is illegal and can lead to unpredictable behavior, such as accessing memory that has been updated or causing use-after-free issues. This possible bug was identified using a static analysis tool developed by myself, specifically designed to detect RCU-related issues. To address this, the `scan_req->type` value is now stored in a local variable `scan_req_type` while still within the RCU read-side critical section. The `scan_req_type` is then used after the RCU lock is released, ensuring that the type value is safely accessed without violating RCU rules.

Faiblesses (CWE)

  • CWE-416 — Utilisation après libération

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8 < e676e4ea76bbe7f1156d8c326b9b6753849481c2 ; affected e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8 < 540138377b22f601f06f55ebfa3ca171dcab471a ; affected e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8 < d18f669461811dfe2915d5554ab2a9834f810013 ; affected e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8 < bff1709b3980bd7f80be6786f64cc9a9ee9e56da
Linux · Linuxaffected 6.5 ; unaffected 0 < 6.5 ; unaffected 6.6.55 ≤ 6.6.* ; unaffected 6.10.14 ≤ 6.10.* ; unaffected 6.11.3 ≤ 6.11.* ; unaffected 6.12 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD