Linux kernel __dst_negative_advice()远程代码执行漏洞

详细信息

漏洞类型

通用型漏洞

漏洞描述

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。Linux kernel存在安全漏洞，这是由网络路由管理中的释放后使用错误所致。 __dst_negative_advice() 函数没有强制执行适当的RCU（Read-Copy-Update）规则，在需要清除sk->dst_cache时可能导致未定义行为（UAF）。正确的操作顺序应该是先清除sk->sk_dst_cache，然后调用dst_release(old_dst)。然而，__dst_negative_advice() 函数使用了错误的顺序。攻击者可以利用此漏洞，尤其是在Android设备上。以提升的权限在系统上执行任意代码。 此漏洞会影响通用开源组件、第三方库或不同产品使用的协议。

修复建议

请参阅Linux Kernel GIT Repository以获取修补程序、升级或建议的解决方法信息。参考链接： https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e

参考链接

• https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13

  CVE · Patch

• https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6

  CVE · Patch

• https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508

  CVE · Patch

• https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4

  CVE · Patch

• https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e

  CVE · Patch

• https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc

  CVE · Patch

• https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72

  CVE · Patch

• https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf

  CVE · Patch

• https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

  CVE · Mailing List

• https://source.android.com/security/bulletin/2024-08-01

  OSV

• https://android.googlesource.com/kernel/common/+/41a05cfc0e471cea173345622375b672edd8ed3c

  OSV

• https://android.googlesource.com/kernel/common/+/dd432c37afcddde2295aa3b3afc3ab293dbefaf8

  OSV

• https://android.googlesource.com/kernel/common/+/079d4f3ff06b21f99aed51d8b22534bdfda5a134

  OSV

• https://android.googlesource.com/kernel/common/+/3856ad0c3e3028d54c8dac960dec411e45c13146

  OSV

• https://android.googlesource.com/kernel/common/+/51e48339d74bc7c4e94fd813fc3e61e0fc0c43ae

  OSV

• https://android.googlesource.com/kernel/common/+/bda79d62f01fdd3398efe0886faa4eb6330889f6

  OSV

• https://android.googlesource.com/kernel/common/+/b8932254b9b2f02620e96572fee9c615c1db2bc3

  OSV

• https://android.googlesource.com/kernel/common/+/9b0dadc811eb0140a61734cde73498c1dd574fa1

  OSV

• https://android.googlesource.com/kernel/common/+/9a84d60e35317c5799ebcbf1c6872f0a2b7d6006

  OSV

• https://android.googlesource.com/kernel/common/+/bd2bcb81d4ebcffd4e56bb8dfe3e3d4c871928f5

  OSV

• https://android.googlesource.com/kernel/common/+/a7462d7032e5ed971980180c6a5aadc8ad700331

  OSV

• https://osv.dev/vulnerability/ASB-A-343727534

  OSV

• https://consumer.huawei.com/cn/support/bulletin/2024/9/

  HarmonyOS

• https://ubuntu.com/security/CVE-2024-36971

  OSV

• https://www.cve.org/CVERecord?id=CVE-2024-36971

  OSV

• https://git.kernel.org/linus/92f1655aa2b2294d0b49925f3b875a634bd3b59e

  OSV

• https://ubuntu.com/security/notices/USN-6951-1

  OSV

• https://ubuntu.com/security/notices/USN-6953-1

  OSV

• https://ubuntu.com/security/notices/USN-6951-2

  OSV

• https://ubuntu.com/security/notices/USN-6951-3

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://ubuntu.com/security/notices/USN-6951-4

  OSV

• https://ubuntu.com/security/notices/USN-6979-1

  OSV

• https://ubuntu.com/security/notices/USN-6999-1

  OSV

• https://ubuntu.com/security/notices/USN-7004-1

  OSV

• https://ubuntu.com/security/notices/USN-7005-1

  OSV

• https://ubuntu.com/security/notices/USN-7007-1

  OSV

• https://ubuntu.com/security/notices/USN-7008-1

  OSV

• https://ubuntu.com/security/notices/USN-7005-2

  OSV

• https://ubuntu.com/security/notices/USN-7009-1

  OSV

• https://ubuntu.com/security/notices/USN-7019-1

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2024-36971

  OSV

• https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-09.md
• https://ubuntu.com/security/notices/USN-7007-2

  OSV

• https://ubuntu.com/security/notices/USN-6999-2

  OSV

• https://ubuntu.com/security/notices/USN-7007-3

  OSV

• https://ubuntu.com/security/notices/USN-7029-1

  OSV

• https://ubuntu.com/security/notices/USN-7009-2

  OSV

• https://ubuntu.com/security/notices/USN-7069-1

  OSV

• https://ubuntu.com/security/notices/USN-7069-2

  OSV

• https://security-tracker.debian.org/tracker/CVE-2024-36971

  OSV

• https://osv.dev/vulnerability/CVE-2024-36971

  OSV

• https://docs.bell-sw.com/security/cves/CVE-2024-36971

  OSV

• https://osv.dev/vulnerability/BELL-CVE-2024-36971

  OSV

• https://osv.dev/vulnerability/DEBIAN-CVE-2024-36971

  OSV

• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-36971

  OSV · US Government Resource

• https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36971.json

  OSV

• https://nvd.nist.gov/vuln/detail/CVE-2024-36971

  OSV