CVE-2024-56694

Summary

CVE-2024-56694 is a newly identified vulnerability in the Linux kernel. It affects the bpf (Berkeley Packet Filter) subsystem, specifically the stream_verdict program. The issue arises when the program returns SK_PASS, causing the received skb (socket buffer) to be placed into its own receive queue. However, a recursive lock occurs, leading to an operating system deadlock. This vulnerability has existed since Linux kernel version 6.9. The problem is located in the sk_psock_strp_data_ready function, where a read_lock_bh(&sk->sk_callback_lock) call creates a deadlock. Despite previous discussions about this vulnerability, a fix has not yet been implemented. (Source: <https://lore.kernel.org/all/[email protected]>)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.