Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-26838
HistoryApr 17, 2024 - 12:00 a.m.

CVE-2024-26838

2024-04-1700:00:00
ubuntu.com
ubuntu.com
7
linux kernel
rdma
irdma
kasan issue
tasklet
irq
security fix

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix KASAN issue with tasklet KASAN testing revealed the
following issue assocated with freeing an IRQ. [50006.466686] Call Trace:
[50006.466691] <IRQ> [50006.489538] dump_stack+0x5c/0x80 [50006.493475]
print_address_description.constprop.6+0x1a/0x150 [50006.499872] ?
irdma_sc_process_ceq+0x483/0x790 [irdma] [50006.505742] ?
irdma_sc_process_ceq+0x483/0x790 [irdma] [50006.511644]
kasan_report.cold.11+0x7f/0x118 [50006.516572] ?
irdma_sc_process_ceq+0x483/0x790 [irdma] [50006.522473]
irdma_sc_process_ceq+0x483/0x790 [irdma] [50006.528232]
irdma_process_ceq+0xb2/0x400 [irdma] [50006.533601] ?
irdma_hw_flush_wqes_callback+0x370/0x370 [irdma] [50006.540298]
irdma_ceq_dpc+0x44/0x100 [irdma] [50006.545306]
tasklet_action_common.isra.14+0x148/0x2c0 [50006.551096]
__do_softirq+0x1d0/0xaf8 [50006.555396] irq_exit_rcu+0x219/0x260
[50006.559670] irq_exit+0xa/0x20 [50006.563320]
smp_apic_timer_interrupt+0x1bf/0x690 [50006.568645]
apic_timer_interrupt+0xf/0x20 [50006.573341] </IRQ> The issue is that a
tasklet could be pending on another core racing the delete of the irq. Fix
by insuring any scheduled tasklet is killed after deleting the irq.

References

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%