CVE-2024-50127

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.61

Description The issue is related to the taprio change() function in the net/sched/sch taprio.c module of the Linux kernel's net/sched component. It involves a use-after-free vulnerability due to a race condition, where the admin pointer may become dangling because of scheduling switch or removal caused by advance sched(). This can lead to an impact on the confidentiality, integrity, and availability of protected information. The critical section protected by q->current entry lock is too small to prevent such a scenario, resulting in a use-after-free detected by KASAN.

Recommendations For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider restricting access to the taprio change() function until a patch is available. Additionally, prefer using rcu replace pointer() over rcu assign pointer() to update the admin pointer immediately before attempting to schedule freeing.