In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net\/packet: avoid fanout hook re-registration after unregister<\/p>\n
packet_set_ring() temporarily detaches a socket from packet delivery while
\nreconfiguring its ring. It records the previous running state, clears
\npo->num, unregisters the protocol hook when needed, drops po->bind_lock,
\nand later restores po->num and re-registers the hook from the saved
\nwas_running value.<\/p>\n
That unlocked window can race with NETDEV_UNREGISTER. The notifier can
\nobserve the socket as not running, skip __unregister_prot_hook(), and
\ninvalidate the per-socket binding by setting po->ifindex to -1 and clearing
\npo->prot_hook.dev. A one-member fanout group can still retain its shared
\nfanout hook device pointer. When packet_set_ring() resumes, re-registering
\nsolely from the stale was_running state can re-add the fanout hook after
\nthe device has been unregistered.<\/p>\n
Treat po->ifindex == -1 as an invalidated binding after reacquiring
\npo->bind_lock. This is distinct from ifindex 0, the normal
\nunbound\/wildcard state: ifindex -1 marks an existing device binding that
\nwas invalidated when the device was unregistered. Restore po->num as
\nbefore, but do not re-register the hook if device unregister already
\ndetached the socket.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net\/packet: avoid fanout hook re-registration after unregister<\/p>\n
packet_set_ring() temporarily detaches a socket from packet deliver<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-5430","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/5430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5430"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}