CVE-2024-41081 - Vulnerability Details

Vendors	Products
Linux	Linux Kernel

Link	Providers
https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316
https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da
https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a
https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c
https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a
https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f
https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c
https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830
https://lore.kernel.org/linux-cve-announce/2024072926-CVE-2024-41081-2552@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-41081
https://www.cve.org/CVERecord?id=CVE-2024-41081

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Weaknesses		CWE-667
References		https://lore.kernel.org/linux-cve-announce/2024072926-CVE-2024-41081-2552@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2024-41081 https://www.cve.org/CVERecord?id=CVE-2024-41081
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-41081", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-07-12T12:17:45.633Z", "datePublished": "2024-07-29T15:04:18.459Z", "dateUpdated": "2025-05-21T09:12:56.181Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-21T09:12:56.181Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nila: block BH in ila_output()\n\nAs explained in commit 1378817486d6 (\"tipc: block BH\nbefore using dst_cache\"), net/core/dst_cache.c\nhelpers need to be called with BH disabled.\n\nila_output() is called from lwtunnel_output()\npossibly from process context, and under rcu_read_lock().\n\nWe might be interrupted by a softirq, re-enter ila_output()\nand corrupt dst_cache data structures.\n\nFix the race by using local_bh_disable()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/ipv6/ila/ila_lwt.c"], "versions": [{"version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "7435bd2f84a25aba607030237261b3795ba782da", "status": "affected", "versionType": "git"}, {"version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "96103371091c6476eb07f4c66624bdd1b42f758a", "status": "affected", "versionType": "git"}, {"version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "a0cafb7b0b94d18e4813ee4b712a056f280e7b5a", "status": "affected", "versionType": "git"}, {"version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "feac2391e26b086f73be30e9b1ab215eada8d830", "status": "affected", "versionType": "git"}, {"version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "b4eb25a3d70df925a9fa4e82d17a958a0a228f5f", "status": "affected", "versionType": "git"}, {"version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "522c3336c2025818fa05e9daf0ac35711e55e316", "status": "affected", "versionType": "git"}, {"version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "9f9c79d8e527d867e0875868b14fb76e6011e70c", "status": "affected", "versionType": "git"}, {"version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "cf28ff8e4c02e1ffa850755288ac954b6ff0db8c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/ipv6/ila/ila_lwt.c"], "versions": [{"version": "4.10", "status": "affected"}, {"version": "0", "lessThan": "4.10", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.319", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.281", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.223", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.164", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.101", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.42", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9.11", "lessThanOrEqual": "6.9.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.10", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "4.19.319"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "5.4.281"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "5.10.223"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "5.15.164"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.1.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.6.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.9.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.10"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da"}, {"url": "https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a"}, {"url": "https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a"}, {"url": "https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830"}, {"url": "https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f"}, {"url": "https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316"}, {"url": "https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c"}, {"url": "https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c"}], "title": "ila: block BH in ila_output()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:46:51.185Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-41081", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T16:21:05.349089Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:33:59.351Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-41081 (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

state : PUBLISHED (string)

assignerShortName : Linux (string)

dateReserved : 2024-07-12T12:17:45.633Z (string)

datePublished : 2024-07-29T15:04:18.459Z (string)

dateUpdated : 2025-05-21T09:12:56.181Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2025-05-21T09:12:56.181Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable(). (string)

}

]

affected : [ »

0 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : unaffected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : net/ipv6/ila/ila_lwt.c (string)

]

versions : [ »

0 : { »

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : 7435bd2f84a25aba607030237261b3795ba782da (string)

status : affected (string)

versionType : git (string)

}

1 : { »

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : 96103371091c6476eb07f4c66624bdd1b42f758a (string)

status : affected (string)

versionType : git (string)

}

2 : { »

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : a0cafb7b0b94d18e4813ee4b712a056f280e7b5a (string)

status : affected (string)

versionType : git (string)

}

3 : { »

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : feac2391e26b086f73be30e9b1ab215eada8d830 (string)

status : affected (string)

versionType : git (string)

}

4 : { »

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : b4eb25a3d70df925a9fa4e82d17a958a0a228f5f (string)

status : affected (string)

versionType : git (string)

}

5 : { »

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : 522c3336c2025818fa05e9daf0ac35711e55e316 (string)

status : affected (string)

versionType : git (string)

}

6 : { »

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : 9f9c79d8e527d867e0875868b14fb76e6011e70c (string)

status : affected (string)

versionType : git (string)

}

7 : { »

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : cf28ff8e4c02e1ffa850755288ac954b6ff0db8c (string)

status : affected (string)

versionType : git (string)

}

]

}

1 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : affected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : net/ipv6/ila/ila_lwt.c (string)

]

versions : [ »

0 : { »

version : 4.10 (string)

status : affected (string)

}

1 : { »

version : 0 (string)

lessThan : 4.10 (string)

status : unaffected (string)

versionType : semver (string)

}

2 : { »

version : 4.19.319 (string)

lessThanOrEqual : 4.19.* (string)

status : unaffected (string)

versionType : semver (string)

}

3 : { »

version : 5.4.281 (string)

lessThanOrEqual : 5.4.* (string)

status : unaffected (string)

versionType : semver (string)

}

4 : { »

version : 5.10.223 (string)

lessThanOrEqual : 5.10.* (string)

status : unaffected (string)

versionType : semver (string)

}

5 : { »

version : 5.15.164 (string)

lessThanOrEqual : 5.15.* (string)

status : unaffected (string)

versionType : semver (string)

}

6 : { »

version : 6.1.101 (string)

lessThanOrEqual : 6.1.* (string)

status : unaffected (string)

versionType : semver (string)

}

7 : { »

version : 6.6.42 (string)

lessThanOrEqual : 6.6.* (string)

status : unaffected (string)

versionType : semver (string)

}

8 : { »

version : 6.9.11 (string)

lessThanOrEqual : 6.9.* (string)

status : unaffected (string)

versionType : semver (string)

}

9 : { »

version : 6.10 (string)

lessThanOrEqual : * (string)

status : unaffected (string)

versionType : original_commit_for_fix (string)

}

]

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

operator : OR (string)

negate : false (boolean)

cpeMatch : [ »

0 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.10 (string)

versionEndExcluding : 4.19.319 (string)

}

1 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.10 (string)

versionEndExcluding : 5.4.281 (string)

}

2 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.10 (string)

versionEndExcluding : 5.10.223 (string)

}

3 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.10 (string)

versionEndExcluding : 5.15.164 (string)

}

4 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.10 (string)

versionEndExcluding : 6.1.101 (string)

}

5 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.10 (string)

versionEndExcluding : 6.6.42 (string)

}

6 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.10 (string)

versionEndExcluding : 6.9.11 (string)

}

7 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.10 (string)

versionEndExcluding : 6.10 (string)

}

]

}

]

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da (string)

}

1 : { »

url : https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a (string)

}

2 : { »

url : https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a (string)

}

3 : { »

url : https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 (string)

}

4 : { »

url : https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f (string)

}

5 : { »

url : https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 (string)

}

6 : { »

url : https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c (string)

}

7 : { »

url : https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c (string)

}

]

title : ila: block BH in ila_output() (string)

x_generator : { »

engine : bippy-1.2.0 (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T04:46:51.185Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c (string)

tags : [ »

0 : x_transferred (string)

]

}

7 : { »

url : https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-41081 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-10T16:21:05.349089Z (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-11T17:33:59.351Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:46:51.185Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-41081", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T16:21:05.349089Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:19.999Z"}}], "cna": {"title": "ila: block BH in ila_output()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "7435bd2f84a25aba607030237261b3795ba782da", "versionType": "git"}, {"status": "affected", "version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "96103371091c6476eb07f4c66624bdd1b42f758a", "versionType": "git"}, {"status": "affected", "version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "a0cafb7b0b94d18e4813ee4b712a056f280e7b5a", "versionType": "git"}, {"status": "affected", "version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "feac2391e26b086f73be30e9b1ab215eada8d830", "versionType": "git"}, {"status": "affected", "version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "b4eb25a3d70df925a9fa4e82d17a958a0a228f5f", "versionType": "git"}, {"status": "affected", "version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "522c3336c2025818fa05e9daf0ac35711e55e316", "versionType": "git"}, {"status": "affected", "version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "9f9c79d8e527d867e0875868b14fb76e6011e70c", "versionType": "git"}, {"status": "affected", "version": "79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5", "lessThan": "cf28ff8e4c02e1ffa850755288ac954b6ff0db8c", "versionType": "git"}], "programFiles": ["net/ipv6/ila/ila_lwt.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.10"}, {"status": "unaffected", "version": "0", "lessThan": "4.10", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.319", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.281", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.223", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.164", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.101", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.42", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.9.11", "versionType": "semver", "lessThanOrEqual": "6.9.*"}, {"status": "unaffected", "version": "6.10", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/ipv6/ila/ila_lwt.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da"}, {"url": "https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a"}, {"url": "https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a"}, {"url": "https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830"}, {"url": "https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f"}, {"url": "https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316"}, {"url": "https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c"}, {"url": "https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nila: block BH in ila_output()\n\nAs explained in commit 1378817486d6 (\"tipc: block BH\nbefore using dst_cache\"), net/core/dst_cache.c\nhelpers need to be called with BH disabled.\n\nila_output() is called from lwtunnel_output()\npossibly from process context, and under rcu_read_lock().\n\nWe might be interrupted by a softirq, re-enter ila_output()\nand corrupt dst_cache data structures.\n\nFix the race by using local_bh_disable()."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.19.319", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.281", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.223", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.164", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.101", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.42", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.9.11", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.10", "versionStartIncluding": "4.10"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-21T09:12:56.181Z"}}}, "cveMetadata": {"cveId": "CVE-2024-41081", "state": "PUBLISHED", "dateUpdated": "2025-05-21T09:12:56.181Z", "dateReserved": "2024-07-12T12:17:45.633Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-07-29T15:04:18.459Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c (string)

tags : [ »

0 : x_transferred (string)

]

}

7 : { »

url : https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T04:46:51.185Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-41081 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-10T16:21:05.349089Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-11T12:42:19.999Z (string)

}

]

cna : { »

title : ila: block BH in ila_output() (string)

affected : [ »

0 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : 7435bd2f84a25aba607030237261b3795ba782da (string)

versionType : git (string)

}

1 : { »

status : affected (string)

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : 96103371091c6476eb07f4c66624bdd1b42f758a (string)

versionType : git (string)

}

2 : { »

status : affected (string)

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : a0cafb7b0b94d18e4813ee4b712a056f280e7b5a (string)

versionType : git (string)

}

3 : { »

status : affected (string)

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : feac2391e26b086f73be30e9b1ab215eada8d830 (string)

versionType : git (string)

}

4 : { »

status : affected (string)

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : b4eb25a3d70df925a9fa4e82d17a958a0a228f5f (string)

versionType : git (string)

}

5 : { »

status : affected (string)

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : 522c3336c2025818fa05e9daf0ac35711e55e316 (string)

versionType : git (string)

}

6 : { »

status : affected (string)

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : 9f9c79d8e527d867e0875868b14fb76e6011e70c (string)

versionType : git (string)

}

7 : { »

status : affected (string)

version : 79ff2fc31e0f6a52eeb67fb89fba87e822b9b7b5 (string)

lessThan : cf28ff8e4c02e1ffa850755288ac954b6ff0db8c (string)

versionType : git (string)

}

]

programFiles : [ »

0 : net/ipv6/ila/ila_lwt.c (string)

]

defaultStatus : unaffected (string)

}

1 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10 (string)

}

1 : { »

status : unaffected (string)

version : 0 (string)

lessThan : 4.10 (string)

versionType : semver (string)

}

2 : { »

status : unaffected (string)

version : 4.19.319 (string)

versionType : semver (string)

lessThanOrEqual : 4.19.* (string)

}

3 : { »

status : unaffected (string)

version : 5.4.281 (string)

versionType : semver (string)

lessThanOrEqual : 5.4.* (string)

}

4 : { »

status : unaffected (string)

version : 5.10.223 (string)

versionType : semver (string)

lessThanOrEqual : 5.10.* (string)

}

5 : { »

status : unaffected (string)

version : 5.15.164 (string)

versionType : semver (string)

lessThanOrEqual : 5.15.* (string)

}

6 : { »

status : unaffected (string)

version : 6.1.101 (string)

versionType : semver (string)

lessThanOrEqual : 6.1.* (string)

}

7 : { »

status : unaffected (string)

version : 6.6.42 (string)

versionType : semver (string)

lessThanOrEqual : 6.6.* (string)

}

8 : { »

status : unaffected (string)

version : 6.9.11 (string)

versionType : semver (string)

lessThanOrEqual : 6.9.* (string)

}

9 : { »

status : unaffected (string)

version : 6.10 (string)

versionType : original_commit_for_fix (string)

lessThanOrEqual : * (string)

}

]

programFiles : [ »

0 : net/ipv6/ila/ila_lwt.c (string)

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da (string)

}

1 : { »

url : https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a (string)

}

2 : { »

url : https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a (string)

}

3 : { »

url : https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 (string)

}

4 : { »

url : https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f (string)

}

5 : { »

url : https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 (string)

}

6 : { »

url : https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c (string)

}

7 : { »

url : https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c (string)

}

]

x_generator : { »

engine : bippy-1.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable(). (string)

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

negate : false (boolean)

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 4.19.319 (string)

versionStartIncluding : 4.10 (string)

}

1 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 5.4.281 (string)

versionStartIncluding : 4.10 (string)

}

2 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 5.10.223 (string)

versionStartIncluding : 4.10 (string)

}

3 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 5.15.164 (string)

versionStartIncluding : 4.10 (string)

}

4 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.1.101 (string)

versionStartIncluding : 4.10 (string)

}

5 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.6.42 (string)

versionStartIncluding : 4.10 (string)

}

6 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.9.11 (string)

versionStartIncluding : 4.10 (string)

}

7 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.10 (string)

versionStartIncluding : 4.10 (string)

}

]

operator : OR (string)

}

]

}

]

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2025-05-21T09:12:56.181Z (string)

}

cveMetadata : { »

cveId : CVE-2024-41081 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-21T09:12:56.181Z (string)

dateReserved : 2024-07-12T12:17:45.633Z (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

datePublished : 2024-07-29T15:04:18.459Z (string)

assignerShortName : Linux (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nila: block BH in ila_output()\n\nAs explained in commit 1378817486d6 (\"tipc: block BH\nbefore using dst_cache\"), net/core/dst_cache.c\nhelpers need to be called with BH disabled.\n\nila_output() is called from lwtunnel_output()\npossibly from process context, and under rcu_read_lock().\n\nWe might be interrupted by a softirq, re-enter ila_output()\nand corrupt dst_cache data structures.\n\nFix the race by using local_bh_disable()."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ila: bloquear BH en ila_output() Como se explica en la confirmaci\u00f3n 1378817486d6 (\"tipc: bloquear BH antes de usar dst_cache\"), los ayudantes net/core/dst_cache.c deben llamarse con BH desactivado. ila_output() se llama desde lwtunnel_output() posiblemente desde el contexto del proceso y bajo rcu_read_lock(). Podr\u00edamos ser interrumpidos por un softirq, volver a ingresar a ila_output() y da\u00f1ar las estructuras de datos dst_cache. Arregle la carrera usando local_bh_disable()."}], "id": "CVE-2024-41081", "lastModified": "2024-11-21T09:32:12.353", "metrics": {}, "published": "2024-07-29T15:15:15.593", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}

{

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable(). (string)

}

1 : { »

lang : es (string)

value : En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ila: bloquear BH en ila_output() Como se explica en la confirmación 1378817486d6 ("tipc: bloquear BH antes de usar dst_cache"), los ayudantes net/core/dst_cache.c deben llamarse con BH desactivado. ila_output() se llama desde lwtunnel_output() posiblemente desde el contexto del proceso y bajo rcu_read_lock(). Podríamos ser interrumpidos por un softirq, volver a ingresar a ila_output() y dañar las estructuras de datos dst_cache. Arregle la carrera usando local_bh_disable(). (string)

}

]

id : CVE-2024-41081 (string)

lastModified : 2024-11-21T09:32:12.353 (string)

metrics : { *empty* }

published : 2024-07-29T15:15:15.593 (string)

references : [ »

0 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

url : https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 (string)

}

1 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

url : https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da (string)

}

2 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

url : https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a (string)

}

3 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

url : https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c (string)

}

4 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

url : https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a (string)

}

5 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

url : https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f (string)

}

6 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

url : https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c (string)

}

7 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

url : https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 (string)

}

8 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://git.kernel.org/stable/c/522c3336c2025818fa05e9daf0ac35711e55e316 (string)

}

9 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://git.kernel.org/stable/c/7435bd2f84a25aba607030237261b3795ba782da (string)

}

10 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://git.kernel.org/stable/c/96103371091c6476eb07f4c66624bdd1b42f758a (string)

}

11 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://git.kernel.org/stable/c/9f9c79d8e527d867e0875868b14fb76e6011e70c (string)

}

12 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://git.kernel.org/stable/c/a0cafb7b0b94d18e4813ee4b712a056f280e7b5a (string)

}

13 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://git.kernel.org/stable/c/b4eb25a3d70df925a9fa4e82d17a958a0a228f5f (string)

}

14 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://git.kernel.org/stable/c/cf28ff8e4c02e1ffa850755288ac954b6ff0db8c (string)

}

15 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://git.kernel.org/stable/c/feac2391e26b086f73be30e9b1ab215eada8d830 (string)

}

]

sourceIdentifier : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

vulnStatus : Awaiting Analysis (string)

}

Show plain JSON

{"bugzilla": {"description": "kernel: ila: block BH in ila_output()", "id": "2300458", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300458"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-667", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nila: block BH in ila_output()\nAs explained in commit 1378817486d6 (\"tipc: block BH\nbefore using dst_cache\"), net/core/dst_cache.c\nhelpers need to be called with BH disabled.\nila_output() is called from lwtunnel_output()\npossibly from process context, and under rcu_read_lock().\nWe might be interrupted by a softirq, re-enter ila_output()\nand corrupt dst_cache data structures.\nFix the race by using local_bh_disable().", "A race condition flaw was found in the Linux kernel's IP Last Anomaly (ILA) subsystem. This issue occurs when the `ila_output()` function, called from `lwtunnel_output()` in process context and under RCU read lock, could be interrupted by a softirq, leading to potential corruption of `dst_cache` data structures."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2024-41081", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-07-29T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-41081\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-41081\nhttps://lore.kernel.org/linux-cve-announce/2024072926-CVE-2024-41081-2552@gregkh/T"], "statement": "Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.", "threat_severity": "Moderate"}

{

bugzilla : { »

description : kernel: ila: block BH in ila_output() (string)

id : 2300458 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2300458 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 5.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-667 (string)

details : [ »

0 : In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable(). (string)

1 : A race condition flaw was found in the Linux kernel's IP Last Anomaly (ILA) subsystem. This issue occurs when the `ila_output()` function, called from `lwtunnel_output()` in process context and under RCU read lock, could be interrupted by a softirq, leading to potential corruption of `dst_cache` data structures. (string)

]

mitigation : { »

lang : en:us (string)

value : Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. (string)

}

name : CVE-2024-41081 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

4 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

5 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

6 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2024-07-29T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2024-41081 https://nvd.nist.gov/vuln/detail/CVE-2024-41081 https://lore.kernel.org/linux-cve-announce/2024072926-CVE-2024-41081-2552@gregkh/T (string)

]

statement : Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions. (string)

threat_severity : Moderate (string)

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object