Linux kernel TIPC node trace reads freed link
A Linux kernel networking part error can crash the system or read wrong memory.
Summary
In the Linux kernel's TIPC networking code, a trace event reads a link without the node lock, so it can use a link that was already freed. This can crash or misbehave the system; affected versions start at 5.0.
Affected when
- TIPC module in use
- tipc_node_reset_links trace event enabled
What to do
Update the kernel to the fixed stable release for your branch: 5.10.273, 5.15.224, 6.1.191, 6.6.161, 6.12.115, 6.18.59, or 7.2.13 or later.
Update to at least the version for your product:
- Linux 5.10 branch 5.10.273 or later
- Linux 5.15 branch 5.15.224 or later
- Linux 6.1 branch 6.1.191 or later
- Linux 6.6 branch 6.6.161 or later
- Linux 6.12 branch 6.12.115 or later
- Linux 6.18 branch 6.18.59 or later
- Linux 7.2 branch 7.2.13 or later
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen