Upstream information
Description
In the Linux kernel, the following vulnerability has been resolved:net/xen-netback: prevent UAF in xenvif_flush_hash()
During the list_for_each_entry_rcu iteration call of xenvif_flush_hash,
kfree_rcu does not exist inside the rcu read critical section, so if
kfree_rcu is called when the rcu grace period ends during the iteration,
UAF occurs when accessing head->next after the entry becomes free.
Therefore, to solve this, you need to change it to list_for_each_entry_safe.
SUSE information
Overall state of this security issue: Does not affect SUSE products
SUSE Bugzilla entry: 1232424 [NEW]No SUSE Security Announcements cross referenced.
SUSE Timeline for this CVE
CVE page created: Mon Oct 28 12:07:26 2024CVE page last modified: Mon Oct 28 12:07:26 2024