CVE-2024-35892 in Linux
摘要
由 VulDB • 2026-06-04
在 Linux 内核中，已修复以下漏洞：
net/sched: 修复 qdisc_tree_reduce_backlog() 中的 lockdep 警告
qdisc_tree_reduce_backlog() 是在持有 qdisc 锁（而非 RTNL 锁）的情况下调用的。
我们必须使用 qdisc_lookup_rcu() 替代 qdisc_lookup()。
syzbot 报告如下：
WARNING: suspicious RCU usage 6.1.74-syzkaller #0 Not tainted ----------------------------- net/sched/sch_api.c:305 suspicious rcu_dereference_protected() usage!
其他可能有助于调试此问题的信息：
rcu_scheduler_active = 2, debug_locks = 1 udevd/1142 持有的 3 个锁： #0: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/spinlock.h:306 [inline]
#0: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/spinlock.h:747 [inline]
#0: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: net_tx_action+0x64a/0x970 net/core/dev.c:5282
#1: ffff888171861108 (&sch->q.lock){+.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:350 [inline]
#1: ffff888171861108 (&sch->q.lock){+.-.}-{2:2}, at: net_tx_action+0x754/0x970 net/core/dev.c:5297
#2: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/spinlock.h:306 [inline]
#2: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/spinlock.h:747 [inline]
#2: ffffffff87c729a0 (rcu_read_lock){....}-{1:2}, at: qdisc_tree_reduce_backlog+0x84/0x580 net/sched/sch_api.c:809
If you want to get best quality of vulnerability data, you may have to visit VulDB.