Security tracker / CVE-2024-56703

CVE-2024-56703

ipv6: Fix soft lockups in fib6_select_path under high next hop churn

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 66f5d6ce53e6 ("ipv6: replace rwlock with rcu and spinlock in
 carnil> fib6_table"). Vulnerable versions: 4.15-rc1.

Bugs

Status

Branch	Status
upstream	released (6.13-rc1) [d9ccb18f83ea2bb654289b6ecf014fd267cc988b]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	released (6.12.2) [34a949e7a0869dfa31a40416d2a56973fae1807b]
6.6-upstream-stable	released (6.6.75) [52da02521ede55fb86546c3fffd9377b3261b91f]
6.1-upstream-stable	released (6.1.128) [d0ec61c9f3583b76aebdbb271f5c0d3fcccd48b2]
5.10-upstream-stable	needed
sid	released (6.12.3-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.128-1)
5.10-bullseye-security	needed