Lucene search

K
osvGoogleOSV:CVE-2024-27390
HistoryMay 01, 2024 - 1:15 p.m.

CVE-2024-27390

2024-05-0113:15:00
Google
osv.dev
1
linux kernel
vulnerability
resolved
cve-2024-27390
ipv6
mcast
synchronize_net
kasan
software.

AI Score

6.6

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 (“ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()”)) I think the synchronize_net() call in ipv6_mc_down() is not needed. Under load, synchronize_net() can last between 200 usec and 5 ms. KASAN seems to agree as well.

References