CVE-2024-50304

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc3-custom-gd95d9a31aceb

Description: The issue is related to a suspicious RCU usage warning in the ip tunnel find() function. The per-netns IP tunnel hash table is protected by the RTNL mutex, and ip tunnel find() is only called from the control path where the mutex is taken. A lockdep expression has been added to hlist for each entry rcu() in ip tunnel find() to validate that the mutex is held and to silence the suspicious RCU usage warning.

Recommendations: To resolve the issue, update to a version of the Linux kernel that includes the fix for the suspicious RCU usage warning in ip tunnel find(). At the moment, there is no information about a newer version that contains a fix for this vulnerability.