Riskcovery

CVE-2024-41005

netpoll: Fix race condition in netpoll_owner_active

State
Published
Severity
Not scored
Published
Jul 12, 2024
Updated
Oct 15, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netpoll: Fix race condition in netpoll_owner_active

KCSAN detected a race condition in netpoll:

BUG: KCSAN: data-race in net_rx_action / netpoll_send_skb write (marked) to 0xffff8881164168b0 of 4 bytes by interrupt on cpu 10: net_rx_action (./include/linux/netpoll.h:90 net/core/dev.c:6712 net/core/dev.c:6822) <snip> read to 0xffff8881164168b0 of 4 bytes by task 1 on cpu 2: netpoll_send_skb (net/core/netpoll.c:319 net/core/netpoll.c:345 net/core/netpoll.c:393) netpoll_send_udp (net/core/netpoll.c:?) <snip> value changed: 0x0000000a -> 0xffffffff

This happens because netpoll_owner_active() needs to check if the current CPU is the owner of the lock, touching napi->poll_owner non atomically. The ->poll_owner field contains the current CPU holding the lock.

Use an atomic read to check if the poll owner is the current CPU.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 89c4b442b78bdba388337cc746fe63caba85f46c to before 43c0ca793a18578a0f5b305dd77fcf7ed99f1265Affected
  • 89c4b442b78bdba388337cc746fe63caba85f46c to before efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8eAffected
  • 89c4b442b78bdba388337cc746fe63caba85f46c to before 96826b16ef9c6568d31a1f6ceaa266411a46e46cAffected
  • 89c4b442b78bdba388337cc746fe63caba85f46c to before 3f1a155950a1685ffd0fd7175b3f671da8771f3dAffected
  • 89c4b442b78bdba388337cc746fe63caba85f46c to before a130e7da73ae93afdb4659842267eec734ffbd57Affected
  • 89c4b442b78bdba388337cc746fe63caba85f46c to before c2e6a872bde9912f1a7579639c5ca3adf1003916Affected
LinuxLinux
  • 4.10Affected
  • before 4.10Not affected
  • 5.10.221 through 5.10.*Not affected
  • 5.15.162 through 5.15.*Not affected
  • 6.1.96 through 6.1.*Not affected
  • 6.6.36 through 6.6.*Not affected
  • 6.9.7 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.