CVE-2024-53042

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc3-custom-gac8f72681cf2

Description The issue is related to a suspicious RCU usage warning in the ip tunnel init flow() function. There are code paths from which the function is called without holding the RCU read lock, resulting in a warning. The fix involves using l3mdev master upper ifindex by index() to acquire the RCU read lock before calling l3mdev master upper ifindex by index rcu().

Recommendations For Linux kernel versions prior to 6.12.0-rc3-custom-gac8f72681cf2, update to a newer version to resolve the issue. As a temporary workaround, consider restricting access to the ip tunnel init flow() function until a patch is available.