mbox series

[SRU,F,0/1] CVE-2024-36938

Message ID 20240927122321.34030-1-massimiliano.pellizzer@canonical.com
Headers show
Series CVE-2024-36938 | expand

Message

Massimiliano Pellizzer Sept. 27, 2024, 12:22 p.m. UTC
[Impact]

Fix NULL pointer data-races in sk_psock_skb_ingress_enqueue()

[Fix]

Noble: Fixed
Jammy: Fixed
Focal: Cherry picked from linux-5.10.y
Bionic: Not affected
Xenial: Not affected

[Test Case]

Compile and boot tested.

[Where problems could occur]

The fix affects the networking subsystem, specifically the BPF sockmap
implementation. An issue with this fix may lead to kernel crashes when
handling network traffic, particularly under heavy load or high
concurrency. Users may also experience poor network performance, failed
socket operations, or application crashes involving BPF programs.

Jason Xing (1):
  bpf, skmsg: Fix NULL pointer dereference in
    sk_psock_skb_ingress_enqueue

 include/linux/skmsg.h | 2 ++
 1 file changed, 2 insertions(+)