CVE-2024-50041

MEDIUM

Linux Kernel 5.15.54-5.15.167 - Use-After-Free in i40e macvlan Filter Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash This patch addresses a macvlan leak issue in the i40e driver caused by concurrent access to vsi->mac_filter_hash. The leak occurs when multiple threads attempt to modify the mac_filter_hash simultaneously, leading to inconsistent state and potential memory leaks. To fix this, we now wrap the calls to i40e_del_mac_filter() and zeroing vf->default_lan_addr.addr with spin_lock/unlock_bh(&vsi->mac_filter_hash_lock), ensuring atomic operations and preventing concurrent access. Additionally, we add lockdep_assert_held(&vsi->mac_filter_hash_lock) in i40e_add_mac_filter() to help catch similar issues in the future. Reproduction steps: 1. Spawn VFs and configure port vlan on them. 2. Trigger concurrent macvlan operations (e.g., adding and deleting portvlan and/or mac filters). 3. Observe the potential memory leak and inconsistent state in the mac_filter_hash. This synchronization ensures the integrity of the mac_filter_hash and prevents the described leak.

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 12.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (17)
Linux/Linux < 5.19
Linux/Linux 5.15.168 - 5.15.*
Linux/Linux 5.15.54 - 5.15.168
Linux/Linux 5.18.11 - 5.19
Linux/Linux 5.19
Linux/Linux 6.1.113 - 6.1.*
Linux/Linux 6.11.4 - 6.11.*
Linux/Linux 6.12
Linux/Linux 6.6.57 - 6.6.*
Linux/Linux 8bfcbaa379694e05290fcff21f4bd40afcf88776
... and 7 more
Published Oct 21, 2024
Tracked Since Feb 18, 2026