Security tracker / CVE-2024-39500

CVE-2024-39500

sock_map: avoid race between sock_map_close and sk_psock_put

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in aadb2bb83ff7 ("sock_map: Fix a potential use-after-free in
 carnil> sock_map_close()")
 carnil> 5b4a79ba65a1 ("bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call
 carnil> itself"). Vulnerable versions: 5.13-rc1.

Bugs

Status

Branch	Status
upstream	released (6.10-rc2) [4b4647add7d3c8530493f7247d11e257ee425bf0]
6.19-upstream-stable	N/A "Fixed before branching point"
6.18-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.9-upstream-stable	released (6.9.6) [3627605de498639a3c586c8684d12c89cba11073]
6.6-upstream-stable	released (6.6.35) [e946428439a0d2079959f5603256ac51b6047017]
6.1-upstream-stable	released (6.1.95) [5eabdf17fed2ad41b836bb4055ec36d95e512c50]
5.10-upstream-stable	needed
4.19-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.9.7-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.98-1)
5.10-bullseye-security	needed