CVE-2024-42250 cachefiles: add missing lock protection when polling
A race condition in the Linux kernel cachefiles module can lead to a denial of service due to missing lock protection during polling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-42250?
CVE-2024-42250 is a high-severity vulnerability in Linux kernel, published on 7 Aug 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
cachefiles: add missing lock protection when polling
Add missing lock protection in poll routine when iterating xarray, otherwise:
Even with RCU read lock held, only the slot of the radix tree is ensured to be pinned there, while the data structure (e.g. struct cachefiles_req) stored in the slot has no such guarantee. The poll routine will iterate the radix tree and dereference cachefiles_req accordingly. Thus RCU read lock is not adequate in this case and spinlock is needed here.
Weakness: CWE-667
Which versions are affected by CVE-2024-42250?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-42250?
Apply the vendor's patch.
Is CVE-2024-42250 being exploited?
There is no known exploitation of CVE-2024-42250 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-42250, DEBIAN-CVE-2024-42250, GHSA-w52v-vrvm-954m, UBUNTU-CVE-2024-42250.