CVE-2024-50060 io_uring: check if we need to reschedule during overflow flush
A local attacker can cause a denial of service by triggering excessive io_uring overflow entries, leading to long lock-holding periods in the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50060?
CVE-2024-50060 is a medium-severity denial of service vulnerability in Linux kernel, published on 21 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
io_uring: check if we need to reschedule during overflow flush
In terms of normal application usage, this list will always be empty. And if an application does overflow a bit, it'll have a few entries. However, nothing obviously prevents syzbot from running a test case that generates a ton of overflow entries, and then flushing them can take quite a while.
Check for needing to reschedule while flushing, and drop our locks and do so if necessary. There's no state to maintain here as overflows always prune from head-of-list, hence it's fine to drop and reacquire the locks at the end of the loop.
Which versions are affected by CVE-2024-50060?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50060?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-50060 being exploited?
There is no known exploitation of CVE-2024-50060 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-50060, DEBIAN-CVE-2024-50060, GHSA-pxgm-f458-hpx2, ROOT-OS-DEBIAN-11-CVE-2024-50060, ROOT-OS-UBUNTU-2204-CVE-2024-50060, UBUNTU-CVE-2024-50060.