Race condition in Linux kernel - CVE-2024-23196

Vulnerability identifier: #VU87784

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-23196

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition within the snd_hdac_regmap_sync() function in sound/hda/hdac_regmap.c. A local user can exploit the race and crash the OS kernel.

Linux kernel
openEuler
bpftool-debuginfo
kernel
kernel-devel
python3-perf
kernel-debugsource
bpftool
kernel-tools-debuginfo
kernel-headers
perf
kernel-debuginfo
kernel-tools
kernel-source
python3-perf-debuginfo
perf-debuginfo
kernel-tools-devel

Install updates from vendor's website.

bpftool-debuginfo - update to 5.10.0-60.127.0.154
kernel - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
kernel-devel - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
python3-perf - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
kernel-debugsource - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
bpftool - update to 5.10.0-60.127.0.154
kernel-tools-debuginfo - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
kernel-headers - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
perf - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
kernel-debuginfo - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
kernel-tools - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
kernel-source - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
python3-perf-debuginfo - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
perf-debuginfo - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102
kernel-tools-devel - addressed in versions 5.10.0-60.127.0.154, 5.10.0-136.65.0.145, 5.10.0-153.44.0.122, 5.10.0-189.0.0.102

• https://bugzilla.openanolis.cn/show_bug.cgi?id=8148
• https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=1f4a08fed450db87fbb5ff5105354158bdbe1a22

• Local denial of service in Linux kernel hda device driver
• openEuler 22.03 LTS update for kernel
• openEuler 22.03 LTS SP1 update for kernel
• openEuler 22.03 LTS SP2 update for kernel
• openEuler 22.03 LTS SP3 update for kernel