CVE-2024-58088

Summary

CVE-2024-58088 is a vulnerability affecting the Linux kernel where a deadlock can occur when freeing cgroup storage. The issue stems from the bpf_cgrp_storage component, which was introduced in a later commit than a previous deadlock prevention measure. In this vulnerability, NULL was passed to bpf_local_storage_map_free() instead of the busy counter, resulting in a deadlock. Progs A and B, which involve cgroup_storage_ptr and sys_enter respectively, can trigger this vulnerability by filling and accessing the hash map. To reproduce the issue, one can run Prog A and then continuously run and destroy Prog B. The fix for this vulnerability involves passing the busy counter to the free procedure to ensure proper incrementation before storage/smap locking.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.