CVE-2024-35892

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.74-syzkaller

Description The issue is related to a lockdep splat in the qdisc tree reduce backlog() function, which is called with the qdisc lock held, not RTNL. This can lead to suspicious RCU usage. The qdisc lookup() function should be replaced with qdisc lookup rcu() to fix the issue. The vulnerability can cause a denial of service.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the qdisc tree reduce backlog() function. As a temporary workaround, consider disabling the qdisc tree reduce backlog() function until a patch is available.