Junglewise Threat Intelligence

CVE-2024-58071: Linux Kernel recursive locking in ethernet teaming driver

CVE-2024-58071 · Severity: medium · CVSS 5.5 · Published 2025-03-06

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's network 'teaming' driver could allow a local user to cause a system crash or deadlock. By attempting to add a network device to a team that is already indirectly part of that team (such as a physical interface and its virtual VLAN counterpart), the system can enter an infinite loop while trying to manage locks. This results in a denial-of-service condition where the system becomes unresponsive.

Technical details

A recursive locking vulnerability exists in the Linux kernel's ethernet teaming driver (drivers/net/team/team.c). The issue occurs when a user attempts to add a network device as a slave to a team interface when that device is already an 'upper' or 'lower' dependency of an existing team member (e.g., adding a physical veth device when its VLAN child is already a member). This configuration triggers a deadlock scenario because the `team_add_slave` function and the subsequent `team_device_event` notification both attempt to acquire the same `team->team_lock_key` mutex. An attacker with local privileges to configure network interfaces can exploit this to cause a kernel deadlock (Denial of Service). The fix introduces a check using `netdev_has_upper_dev` to prevent such circular or redundant attachments.

Affected products

  • Linux Linux Kernel Fixed in 6.13.2, 6.12.13, 6.11.11, 6.6.76, 6.1.128, 5.15.178, 5.10.234, 5.4.290, 4.19.327

Timeline

  • 2024-12-30: patched: Initial fix authored
  • 2025-03-06: advisory: NVD publication date

References

Related threats