Junglewise Threat Intelligence

CVE-2024-38589: Linux Kernel deadlock in netrom nr_rt_ioctl

CVE-2024-38589 · Severity: medium · CVSS 5.5 · Published 2024-06-19

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's NET/ROM protocol implementation could allow a local user to cause a system deadlock. NET/ROM is a protocol used primarily in amateur radio networking. An exploit could lead to a complete system hang or denial of service, impacting the availability of the affected machine.

Technical details

A deadlock vulnerability exists in the Linux kernel's NET/ROM routing implementation within the nr_rt_ioctl() function. The issue stems from an inconsistent locking order between nr_node_list_lock and nr_node->node_lock. Specifically, the kernel could attempt to acquire these locks in different orders across different code paths, leading to a circular dependency. A local attacker with sufficient privileges to interact with network ioctls could trigger this condition, resulting in a kernel hang (Denial of Service). The fix ensures that nr_node_list_lock is always acquired before nr_node_lock.

Affected products

  • Linux Linux Kernel 2.6.12 to 6.9.0-rc7

Timeline

  • 2024-05-15: disclosed: Vulnerability reported by syzbot and patch submitted by Eric Dumazet.
  • 2024-06-19: advisory: CVE-2024-38589 published.

References

Related threats