Junglewise Threat Intelligence

CVE-2024-40995: Linux Kernel infinite loop in net/sched act_api

CVE-2024-40995 · Severity: medium · CVSS 5.5 · Published 2024-07-12

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's networking subsystem can cause the system to hang or become unresponsive. This occurs when specific network configuration requests are processed in a way that creates an infinite loop, blocking critical system tasks. An attacker with local access could exploit this to cause a denial-of-service, impacting system availability and operations.

Technical details

A vulnerability classified as an infinite loop (CWE-835) exists in the net/sched/act_api.c component of the Linux kernel. The issue occurs in tcf_idr_check_alloc() when a request to add multiple network actions with the same index is processed. The second request can enter an infinite loop while holding the rtnl_lock, leading to task hangs and a denial-of-service condition. The fix replaces the infinite 'goto again' loop with a return of -EAGAIN to properly handle the race condition. Patches have been released across multiple stable kernel branches.

Affected products

  • Linux Linux Kernel 4.19 to 5.4.279, 5.5 to 5.10.221, 5.11 to 5.15.162, 5.16 to 6.1.96, 6.2 to 6.6.36, 6.7 to 6.9.7

Timeline

  • 2024-06-14: patched: Initial patch submitted by David Ruth
  • 2024-07-12: disclosed: CVE-2024-40995 published

References

Related threats