In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024072926-CVE-2024-41081-2552@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-41081 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-41081 cve-icon
History

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 19 Aug 2024 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-667
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-29T15:04:18.459Z

Updated: 2024-09-11T17:33:59.351Z

Reserved: 2024-07-12T12:17:45.633Z

Link: CVE-2024-41081

cve-icon Vulnrichment

Updated: 2024-08-02T04:46:51.185Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-29T15:15:15.593

Modified: 2024-07-29T16:21:52.517

Link: CVE-2024-41081

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-29T00:00:00Z

Links: CVE-2024-41081 - Bugzilla