PT-2024-21539
CVE-2024-26862
·
Published
2024-03-14
·
Updated
2025-09-29
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0-syzkaller-08073-g480e035fc4c7
Description
A data-race vulnerability has been resolved in the Linux kernel. The issue occurred because
ignore outgoing was read locklessly from dev queue xmit nit() and packet getsockopt(). To fix this, appropriate READ ONCE()/WRITE ONCE() annotations were added. The vulnerability was reported by the Kernel Concurrency Sanitizer.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, update to a version later than 6.8.0-syzkaller-08073-g480e035fc4c7.
Note: The provided information does not specify the exact version that includes the fix, but it is recommended to update to the latest available version to ensure the vulnerability is resolved.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾