Ubuntu: (Multiple Advisories) (CVE-2024-36286): Linux kernel vulnerabilities

Ubuntu: (Multiple Advisories) (CVE-2024-36286): Linux kernel vulnerabilities

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

06/21/2024

Created

08/10/2024

Added

08/09/2024

Modified

01/28/2025

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() syzbot reported that nf_reinject() could be called without rcu_read_lock() : WARNING: suspicious RCU usage 6.9.0-rc7-syzkaller-02060-g5c1672705a1a #0 Not tainted net/netfilter/nfnetlink_queue.c:263 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 2 locks held by syz-executor.4/13427: #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2190 [inline] #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_core+0xa86/0x1830 kernel/rcu/tree.c:2471 #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: nfqnl_flush net/netfilter/nfnetlink_queue.c:405 [inline] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: instance_destroy_rcu+0x30/0x220 net/netfilter/nfnetlink_queue.c:172 stack backtrace: CPU: 0 PID: 13427 Comm: syz-executor.4 Not tainted 6.9.0-rc7-syzkaller-02060-g5c1672705a1a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712 nf_reinject net/netfilter/nfnetlink_queue.c:323 [inline] nfqnl_reinject+0x6ec/0x1120 net/netfilter/nfnetlink_queue.c:397 nfqnl_flush net/netfilter/nfnetlink_queue.c:410 [inline] instance_destroy_rcu+0x1ae/0x220 net/netfilter/nfnetlink_queue.c:172 rcu_do_batch kernel/rcu/tree.c:2196 [inline] rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2471 handle_softirqs+0x2d6/0x990 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 </IRQ> <TASK>

Solution(s)

• ubuntu-upgrade-linux-image-5-15-0-1035-xilinx-zynqmp
• ubuntu-upgrade-linux-image-5-15-0-1052-gkeop
• ubuntu-upgrade-linux-image-5-15-0-1062-ibm
• ubuntu-upgrade-linux-image-5-15-0-1062-raspi
• ubuntu-upgrade-linux-image-5-15-0-1064-intel-iotg
• ubuntu-upgrade-linux-image-5-15-0-1064-nvidia
• ubuntu-upgrade-linux-image-5-15-0-1064-nvidia-lowlatency
• ubuntu-upgrade-linux-image-5-15-0-1066-gke
• ubuntu-upgrade-linux-image-5-15-0-1066-kvm
• ubuntu-upgrade-linux-image-5-15-0-1067-oracle
• ubuntu-upgrade-linux-image-5-15-0-1068-gcp
• ubuntu-upgrade-linux-image-5-15-0-1069-aws
• ubuntu-upgrade-linux-image-5-15-0-1072-azure
• ubuntu-upgrade-linux-image-5-15-0-1072-azure-fde
• ubuntu-upgrade-linux-image-5-15-0-121-generic
• ubuntu-upgrade-linux-image-5-15-0-121-generic-64k
• ubuntu-upgrade-linux-image-5-15-0-121-generic-lpae
• ubuntu-upgrade-linux-image-5-15-0-121-lowlatency
• ubuntu-upgrade-linux-image-5-15-0-121-lowlatency-64k
• ubuntu-upgrade-linux-image-5-4-0-1042-iot
• ubuntu-upgrade-linux-image-5-4-0-1049-xilinx-zynqmp
• ubuntu-upgrade-linux-image-5-4-0-1077-ibm
• ubuntu-upgrade-linux-image-5-4-0-1090-bluefield
• ubuntu-upgrade-linux-image-5-4-0-1097-gkeop
• ubuntu-upgrade-linux-image-5-4-0-1114-raspi
• ubuntu-upgrade-linux-image-5-4-0-1118-kvm
• ubuntu-upgrade-linux-image-5-4-0-1129-oracle
• ubuntu-upgrade-linux-image-5-4-0-1130-aws
• ubuntu-upgrade-linux-image-5-4-0-1134-gcp
• ubuntu-upgrade-linux-image-5-4-0-1135-azure
• ubuntu-upgrade-linux-image-5-4-0-192-generic
• ubuntu-upgrade-linux-image-5-4-0-192-generic-lpae
• ubuntu-upgrade-linux-image-5-4-0-192-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-1010-gke
• ubuntu-upgrade-linux-image-6-8-0-1011-raspi
• ubuntu-upgrade-linux-image-6-8-0-1012-ibm
• ubuntu-upgrade-linux-image-6-8-0-1012-oem
• ubuntu-upgrade-linux-image-6-8-0-1012-oracle
• ubuntu-upgrade-linux-image-6-8-0-1012-oracle-64k
• ubuntu-upgrade-linux-image-6-8-0-1013-nvidia
• ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-64k
• ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-lowlatency-64k
• ubuntu-upgrade-linux-image-6-8-0-1014-azure
• ubuntu-upgrade-linux-image-6-8-0-1014-azure-fde
• ubuntu-upgrade-linux-image-6-8-0-1014-gcp
• ubuntu-upgrade-linux-image-6-8-0-1015-aws
• ubuntu-upgrade-linux-image-6-8-0-44-generic
• ubuntu-upgrade-linux-image-6-8-0-44-generic-64k
• ubuntu-upgrade-linux-image-6-8-0-44-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-44-lowlatency-64k
• ubuntu-upgrade-linux-image-6-8-0-45-generic
• ubuntu-upgrade-linux-image-6-8-0-45-generic-64k
• ubuntu-upgrade-linux-image-aws
• ubuntu-upgrade-linux-image-aws-lts-20-04
• ubuntu-upgrade-linux-image-aws-lts-22-04
• ubuntu-upgrade-linux-image-azure
• ubuntu-upgrade-linux-image-azure-cvm
• ubuntu-upgrade-linux-image-azure-fde
• ubuntu-upgrade-linux-image-azure-fde-lts-22-04
• ubuntu-upgrade-linux-image-azure-lts-20-04
• ubuntu-upgrade-linux-image-azure-lts-22-04
• ubuntu-upgrade-linux-image-bluefield
• ubuntu-upgrade-linux-image-gcp
• ubuntu-upgrade-linux-image-gcp-lts-20-04
• ubuntu-upgrade-linux-image-gcp-lts-22-04
• ubuntu-upgrade-linux-image-generic
• ubuntu-upgrade-linux-image-generic-64k
• ubuntu-upgrade-linux-image-generic-64k-hwe-20-04
• ubuntu-upgrade-linux-image-generic-64k-hwe-22-04
• ubuntu-upgrade-linux-image-generic-64k-hwe-24-04
• ubuntu-upgrade-linux-image-generic-hwe-18-04
• ubuntu-upgrade-linux-image-generic-hwe-20-04
• ubuntu-upgrade-linux-image-generic-hwe-22-04
• ubuntu-upgrade-linux-image-generic-hwe-24-04
• ubuntu-upgrade-linux-image-generic-lpae
• ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04
• ubuntu-upgrade-linux-image-gke
• ubuntu-upgrade-linux-image-gke-5-15
• ubuntu-upgrade-linux-image-gkeop
• ubuntu-upgrade-linux-image-gkeop-5-15
• ubuntu-upgrade-linux-image-gkeop-5-4
• ubuntu-upgrade-linux-image-ibm
• ubuntu-upgrade-linux-image-ibm-classic
• ubuntu-upgrade-linux-image-ibm-lts-20-04
• ubuntu-upgrade-linux-image-ibm-lts-24-04
• ubuntu-upgrade-linux-image-intel
• ubuntu-upgrade-linux-image-intel-iotg
• ubuntu-upgrade-linux-image-kvm
• ubuntu-upgrade-linux-image-lowlatency
• ubuntu-upgrade-linux-image-lowlatency-64k
• ubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04
• ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-18-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-20-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-22-04
• ubuntu-upgrade-linux-image-nvidia
• ubuntu-upgrade-linux-image-nvidia-6-8
• ubuntu-upgrade-linux-image-nvidia-64k
• ubuntu-upgrade-linux-image-nvidia-64k-6-8
• ubuntu-upgrade-linux-image-nvidia-lowlatency
• ubuntu-upgrade-linux-image-nvidia-lowlatency-64k
• ubuntu-upgrade-linux-image-oem
• ubuntu-upgrade-linux-image-oem-20-04
• ubuntu-upgrade-linux-image-oem-20-04b
• ubuntu-upgrade-linux-image-oem-20-04c
• ubuntu-upgrade-linux-image-oem-20-04d
• ubuntu-upgrade-linux-image-oem-22-04
• ubuntu-upgrade-linux-image-oem-22-04a
• ubuntu-upgrade-linux-image-oem-22-04b
• ubuntu-upgrade-linux-image-oem-22-04c
• ubuntu-upgrade-linux-image-oem-22-04d
• ubuntu-upgrade-linux-image-oem-osp1
• ubuntu-upgrade-linux-image-oracle
• ubuntu-upgrade-linux-image-oracle-64k
• ubuntu-upgrade-linux-image-oracle-lts-20-04
• ubuntu-upgrade-linux-image-oracle-lts-22-04
• ubuntu-upgrade-linux-image-raspi
• ubuntu-upgrade-linux-image-raspi-hwe-18-04
• ubuntu-upgrade-linux-image-raspi-nolpae
• ubuntu-upgrade-linux-image-raspi2
• ubuntu-upgrade-linux-image-snapdragon-hwe-18-04
• ubuntu-upgrade-linux-image-virtual
• ubuntu-upgrade-linux-image-virtual-hwe-18-04
• ubuntu-upgrade-linux-image-virtual-hwe-20-04
• ubuntu-upgrade-linux-image-virtual-hwe-22-04
• ubuntu-upgrade-linux-image-virtual-hwe-24-04
• ubuntu-upgrade-linux-image-xilinx-zynqmp

References

• https://attackerkb.com/topics/cve-2024-36286
• CVE - 2024-36286
• USN-6951-1
• USN-6951-2
• USN-6951-3
• USN-6951-4
• USN-6953-1
• USN-6979-1
• USN-6999-1
• USN-6999-2
• USN-7004-1
• USN-7005-1
• USN-7005-2
• USN-7007-1
• USN-7007-2
• USN-7007-3
• USN-7008-1
• USN-7009-1
• USN-7009-2
• USN-7019-1
• USN-7029-1

View more