CVE-2024-35892 in Linux
Riassunto
di VulDB • 23/06/2026
Nel kernel Linux, è stata risolta la seguente vulnerabilità:
net/sched: correzione del lockdep splat in qdisc_tree_reduce_backlog()
qdisc_tree_reduce_backlog() viene chiamata con il blocco qdisc acquisito, non RTNL.
Dobbiamo utilizzare qdisc_lookup_rcu() invece di qdisc_lookup().
syzbot ha segnalato:
WARNING: suspicious RCU usage 6.1.74-syzkaller #0 Not tainted ----------------------------- net/sched/sch_api.c:305 utilizzo sospetto di rcu_dereference_protected()!
altre informazioni che potrebbero aiutarci a risolvere il problema:
rcu_scheduler_active = 2, debug_locks = 1 3 lock detenuti da udevd/1142: #0: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:306 [inline]
#0: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:747 [inline]
#0: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: net_tx_action+0x64a/0x970 net/core/dev.c:5282
#1: ffff888171861108 (&sch->q.lock){+.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:350 [inline]
#1: ffff888171861108 (&sch->q.lock){+.-.}-{2:2}, at: net_tx_action+0x754/0x970 net/core/dev.c:5297
#2: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:306 [inline]
#2: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:747 [inline]
#2: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: qdisc_tree_reduce_backlog+0x84/0x580 net/sched/sch
Once again VulDB remains the best source for vulnerability data.