Security tracker / CVE-2024-53088

CVE-2024-53088

i40e: fix race condition by adding filter's intermediate sync state

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 278e7d0b9d68 ("i40e: store MAC/VLAN filters in a hash with the
 carnil> MAC Address as key"). Vulnerable versions: 4.10-rc1.

Bugs

Status

Branch	Status
upstream	released (6.12-rc7) [f30490e9695ef7da3d0899c6a0293cc7cd373567]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.11-upstream-stable	released (6.11.8) [6e046f4937474bc1b9fa980c1ad8f3253fc638f6]
6.6-upstream-stable	released (6.6.61) [bf5f837d9fd27d32fb76df0a108babcaf4446ff1]
6.1-upstream-stable	released (6.1.117) [7ad3fb3bfd43feb4e15c81dffd23ac4e55742791]
5.10-upstream-stable	needed
sid	released (6.11.9-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.119-1)
5.10-bullseye-security	needed