In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
netfilter: nf_conntrack: defer invalid log until after unlock<\/p>\n
TCP and SCTP conntrack paths can emit invalid-packet logs while ct->lock
\nis still held.<\/p>\n
When invalid logging is routed to nfnetlink_log and conntrack export is
\nenabled, the log path can re-enter conntrack netlink glue and dump the
\nsame conntrack again. Protocol attribute dumping may take ct->lock, so
\nlogging while holding that lock can deadlock.<\/p>\n
Defer the TCP invalid logs by storing only the minimal log context while
\nct->lock is held and emitting the log after unlocking. Also make the TCP
\ntimeout-lowering invalid path return whether a log is needed, then emit
\nthat log after unlocking.<\/p>\n
Do the same for the SCTP invalid state-transition log that can be reached
\nwhile ct->lock is held.<\/p>\n
Add a lockdep assertion to nf_ct_l4proto_log_invalid() so future callers
\nthat log invalid conntracks while holding ct->lock are caught outside TCP
\nand SCTP as well.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
netfilter: nf_conntrack: defer invalid log until after unlock<\/p>\n
TCP and SCTP conntrack paths can emit invalid-packet logs while ct-><\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-11225","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/11225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}