Improper locking in Linux kernel - CVE-2024-26690

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the stmmac_xdp_xmit_zc(), stmmac_tx_clean(), stmmac_tso_xmit(), stmmac_xmit(), stmmac_xdp_xmit_xdpf(), stmmac_dispatch_skb_zc(), stmmac_rx_zc(), stmmac_finalize_xdp_rx(), stmmac_rx(), stmmac_rx_refill(), stmmac_napi_poll_rx(), stmmac_napi_poll_tx(), stmmac_napi_poll_rxtx(), stmmac_get_stats64() and stmmac_dvr_probe() functions in drivers/net/ethernet/stmicro/stmmac/stmmac_main.c, within the stmmac_set_pauseparam() and stmmac_get_ethtool_stats() functions in drivers/net/ethernet/stmicro/stmmac/stmmac_ethtool.c, within the dwxgmac2_dma_interrupt() function in drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c, within the show_rx_process_state() and dwmac_dma_interrupt() functions in drivers/net/ethernet/stmicro/stmmac/dwmac_lib.c, within the dwmac4_dma_interrupt() function in drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c, within the sun8i_dwmac_dma_interrupt() function in drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c. A local user can perform a denial of service (DoS) attack.

Remediation

External links

• https://git.kernel.org/stable/c/9680b2ab54ba8d72581100e8c45471306101836e
• https://git.kernel.org/stable/c/e6af0f082a4b87b99ad033003be2a904a1791b3f
• https://git.kernel.org/stable/c/38cc3c6dcc09dc3a1800b5ec22aef643ca11eab8
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.18
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.6
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8