CVE-2024-50304

Summary

CVE-2024-50304 is a vulnerability affecting the Linux kernel's ipv4 ip_tunnel module. The issue involves a suspicious RCU (Runtime Cultural Value) usage warning in ip_tunnel_find(), which could potentially lead to unintended consequences. The per-netns IP tunnel hash table is protected by the RTNL mutex, and ip_tunnel_find() is only called from the control path where the mutex is taken. To resolve the issue, a lockdep expression has been added to hlist_for_each_entry_rcu() in ip_tunnel_find() to validate that the mutex is held and silence the RCU usage warning. The warning message suggests that RCU-list traversal occurred in a non-reader section, and the call trace shows that the vulnerable function was invoked during the processing of an ipgre_newlink() request.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.