UBUNTU-CVE-2024-35934

In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smcpnetcreatepnetidslist Many syzbot reports show extreme rtnl pressure, and many of them hint that smc acquires rtnl in netns creation for no good reason 1 This patch returns early from...

CVE-2024-35934 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()

In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smcpnetcreatepnetidslist Many syzbot reports show extreme rtnl pressure, and many of them hint that smc acquires rtnl in netns creation for no good reason 1 This patch returns early from...

CVE-2024-35934

The CVE-2024-35934 issue affects the Linux kernel net/smc subsystem. Affected component: smc_pnet-related code in net/smc (pnet IDs list creation). Root cause: excessive RTNL (rtnl) lock pressure during net namespace/pnet initialization, caused by smc_pnet_create_pnetids_list() acquiring rtnl in ...

CVE-2024-35934 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()

In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smcpnetcreatepnetidslist Many syzbot reports show extreme rtnl pressure, and many of them hint that smc acquires rtnl in netns creation for no good reason 1 This patch returns early from...

CVE-2024-35934: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smcpnetcreatepnetidslist Many syzbot reports show extreme rtnl pressure, and many of them hint that smc acquires rtnl in netns creation for no good reason 1 This patch returns early from...

CVE-2024-27021

In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devmledclassdevregister to the netdev is problematic because on module removal we get a RTNL-related deadlock. Fix this by avoiding the device-managed LED functions. Note:...

CVE-2024-27021 r8169: fix LED-related deadlock on module removal

In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devmledclassdevregister to the netdev is problematic because on module removal we get a RTNL-related deadlock. Fix this by avoiding the device-managed LED functions. Note:...

CVE-2024-27021 r8169: fix LED-related deadlock on module removal

In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devmledclassdevregister to the netdev is problematic because on module removal we get a RTNL-related deadlock. Fix this by avoiding the device-managed LED functions. Note:...

PT-2024-8339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the net/smc component of the Linux kernel. It involves incorrect locking in the smc pnet create pnetids list function, which can lead to extreme rtnl...

CVE-2023-52483

In the Linux kernel, the following vulnerability has been resolved: mctp: perform route lookups under a RCU read-side lock Our current route lookups mctproutelookup and mctproutelookupnull traverse the net's route list without the RCU read lock held. This means the route lookup is subject to...

CVE-2023-52483 mctp: perform route lookups under a RCU read-side lock

In the Linux kernel, the following vulnerability has been resolved: mctp: perform route lookups under a RCU read-side lock Our current route lookups mctproutelookup and mctproutelookupnull traverse the net's route list without the RCU read lock held. This means the route lookup is subject to...

PT-2024-8305

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the rtnetlink component of the Linux kernel, specifically with the function rtnl bridge setlink. An adjustment made to the old loop logic in this function to chec...

kernel: igb: revert rtnl_lock() that causes deadlock

In the Linux kernel, the following vulnerability has been resolved: igb: revert rtnllock that causes deadlock The commit 6faee3d4ee8b "igb: Add lock to avoid data race" adds rtnllock to eliminate a false data race shown below FREE from device detaching | USE from netdev core igbremove |...

kernel: igb: revert rtnl_lock() that causes deadlock

In the Linux kernel, the following vulnerability has been resolved: igb: revert rtnllock that causes deadlock The commit 6faee3d4ee8b "igb: Add lock to avoid data race" adds rtnllock to eliminate a false data race shown below FREE from device detaching | USE from netdev core igbremove |...

PT-2025-18824

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was caused by the addition of rtnl lock to prevent a false data race, but it resulted in a deadlock. The deadlock occurre...

PT-2025-41076

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc7 for upstream min debug 2023 06 28 17 02 Description The Linux kernel contains an issue in the net/mlx5e module where the RTNL lock is not held when needed before calling xdp set features. This can occur...

GSD-2022-1000515 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000373 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.101 by commit...

GSD-2022-1000338 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.180 by commit...

GSD-2022-1000316 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.230 by commit...