CVE-2024-41081

ila: block BH in ila_output()

State: Published
Severity: 9.8 Critical
Published: Jul 29, 2024
Updated: Aug 5, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ila: block BH in ila_output()

As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled.

ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock().

We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures.

Fix the race by using local_bh_disable().

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before 7435bd2f84a25aba607030237261b3795ba782daAffected 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before 96103371091c6476eb07f4c66624bdd1b42f758aAffected 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before a0cafb7b0b94d18e4813ee4b712a056f280e7b5aAffected 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before feac2391e26b086f73be30e9b1ab215eada8d830Affected 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before b4eb25a3d70df925a9fa4e82d17a958a0a228f5fAffected 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before 522c3336c2025818fa05e9daf0ac35711e55e316Affected 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before 9f9c79d8e527d867e0875868b14fb76e6011e70cAffected 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before cf28ff8e4c02e1ffa850755288ac954b6ff0db8cAffected
LinuxLinux	4.10Affected before 4.10Not affected 4.19.319 through 4.19.Not affected 5.4.281 through 5.4.Not affected 5.10.223 through 5.10.Not affected 5.15.164 through 5.15.Not affected 6.1.101 through 6.1.Not affected 6.6.42 through 6.6.Not affected 6.9.11 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before 7435bd2f84a25aba607030237261b3795ba782daAffected
79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before 96103371091c6476eb07f4c66624bdd1b42f758aAffected
79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before a0cafb7b0b94d18e4813ee4b712a056f280e7b5aAffected
79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before feac2391e26b086f73be30e9b1ab215eada8d830Affected
79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before b4eb25a3d70df925a9fa4e82d17a958a0a228f5fAffected
79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before 522c3336c2025818fa05e9daf0ac35711e55e316Affected
79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before 9f9c79d8e527d867e0875868b14fb76e6011e70cAffected
79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 to before cf28ff8e4c02e1ffa850755288ac954b6ff0db8cAffected

LinuxLinux

4.10Affected
before 4.10Not affected
4.19.319 through 4.19.*Not affected
5.4.281 through 5.4.*Not affected
5.10.223 through 5.10.*Not affected
5.15.164 through 5.15.*Not affected
6.1.101 through 6.1.*Not affected
6.6.42 through 6.6.*Not affected
6.9.11 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.