In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal of gtp_dellink, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free. To prevent this, it should be changed to hlist_for_each_entry_safe.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: gtp: corrige Use-After-Free en gtp_dellink Dado que call_rcu, que se llama en el recorrido hlist_for_each_entry_rcu de gtp_dellink, no forma parte de la sección crítica de lectura de RCU, es posible que el período de gracia de RCU pasará durante el recorrido y la clave quedará libre. Para evitar esto, se debe cambiar a hlist_for_each_entry_safe.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-416
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36a6d3b40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36a6d1700> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3703ce100> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3401a6480> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36a6d07c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36a6d00c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3848e2040> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b3f3340> | Operating System |
| linux | linux_kernel | 6.9 | <built-in method update of dict object at 0x7fd368d7c980> | Operating System |
| linux | linux_kernel | 6.9 | <built-in method update of dict object at 0x7fd36a6d2380> | Operating System |
| linux | linux_kernel | 6.9 | <built-in method update of dict object at 0x7fd34120a980> | Operating System |
| linux | linux_kernel | 6.9 | <built-in method update of dict object at 0x7fd36a6d3d00> | Operating System |
| linux | linux_kernel | 6.9 | <built-in method update of dict object at 0x7fd34120ac80> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd368d0a780> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |