CVE-2024-42239

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the BPF timer functionality in the Linux kernel. When two or more timer callbacks are executed in parallel and attempt to cancel each other, it can lead to a deadlock situation. This happens because the bpf timer cancel function waits for the callback to finish executing, causing a lockup. To resolve this, an atomic counter named 'cancelling' is added to the bpf hrtimer to track outstanding cancellation requests. If there are any, the operation is failed with an error to prevent the deadlock.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.