CVE-2024-42114— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于wifi:cfg80211模块中允许将NL80211_ATTR_TXQ_QUANTUM设置为2^31，这可能导致软锁。
可能的 ATT&CK 技术 1 AI
T1498.002 · Reflection Amplification影响版本矩阵 14
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 52539ca89f365d3db530535fbffa88a3cca4d2ec< 80ac0cc9c0bef984e29637b1efa93d7214b42f53 |
affected |
52539ca89f365d3db530535fbffa88a3cca4d2ec< 33ac5a4eb3d4bea2146658f1b6d1fa86d62d2b22 |
affected | ||
52539ca89f365d3db530535fbffa88a3cca4d2ec< 3fc06f6d142d2840735543216a60d0a8c345bdec |
affected | ||
52539ca89f365d3db530535fbffa88a3cca4d2ec< 8a3ac7fb36962c34698f884bd697938054ff2afa |
affected | ||
52539ca89f365d3db530535fbffa88a3cca4d2ec< e87c2f098f52aa2fe20258a5bb1738d6a74e9ed7 |
affected | ||
52539ca89f365d3db530535fbffa88a3cca4d2ec< d1cba2ea8121e7fdbe1328cea782876b1dd80993 |
affected | ||
4.18 |
affected | ||
< 4.18 |
unaffected | ||
| … +6 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2024-42114 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
syzbot is able to trigger softlockups, setting NL80211_ATTR_TXQ_QUANTUM
to 2^31.
We had a similar issue in sch_fq, fixed with commit
d9e15a273306 ("pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM")
watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [kworker/1:0:24]
Modules linked in:
irq event stamp: 131135
hardirqs last enabled at (131134): [<ffff80008ae8778c>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline]
hardirqs last enabled at (131134): [<ffff80008ae8778c>] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:95
hardirqs last disabled at (131135): [<ffff80008ae85378>] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline]
hardirqs last disabled at (131135): [<ffff80008ae85378>] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551
softirqs last enabled at (125892): [<ffff80008907e82c>] neigh_hh_init net/core/neighbour.c:1538 [inline]
softirqs last enabled at (125892): [<ffff80008907e82c>] neigh_resolve_output+0x268/0x658 net/core/neighbour.c:1553
softirqs last disabled at (125896): [<ffff80008904166c>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.9.0-rc7-syzkaller-gfda5695d692c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: mld mld_ifc_work
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del include/linux/list.h:195 [inline]
pc : __list_del_entry include/linux/list.h:218 [inline]
pc : list_move_tail include/linux/list.h:310 [inline]
pc : fq_tin_dequeue include/net/fq_impl.h:112 [inline]
pc : ieee80211_tx_dequeue+0x6b8/0x3b4c net/mac80211/tx.c:3854
lr : __list_del_entry include/linux/list.h:218 [inline]
lr : list_move_tail include/linux/list.h:310 [inline]
lr : fq_tin_dequeue include/net/fq_impl.h:112 [inline]
lr : ieee80211_tx_dequeue+0x67c/0x3b4c net/mac80211/tx.c:3854
sp : ffff800093d36700
x29: ffff800093d36a60 x28: ffff800093d36960 x27: dfff800000000000
x26: ffff0000d800ad50 x25: ffff0000d800abe0 x24: ffff0000d800abf0
x23: ffff0000e0032468 x22: ffff0000e00324d4 x21: ffff0000d800abf0
x20: ffff0000d800abf8 x19: ffff0000d800abf0 x18: ffff800093d363c0
x17: 000000000000d476 x16: ffff8000805519dc x15: ffff7000127a6cc8
x14: 1ffff000127a6cc8 x13: 0000000000000004 x12: ffffffffffffffff
x11: ffff7000127a6cc8 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff80009287aa08 x4 : 0000000000000008 x3 : ffff80008034c7fc
x2 : ffff0000e0032468 x1 : 00000000da0e46b8 x0 : ffff0000e0032470
Call trace:
__list_del include/linux/list.h:195 [inline]
__list_del_entry include/linux/list.h:218 [inline]
list_move_tail include/linux/list.h:310 [inline]
fq_tin_dequeue include/net/fq_impl.h:112 [inline]
ieee80211_tx_dequeue+0x6b8/0x3b4c net/mac80211/tx.c:3854
wake_tx_push_queue net/mac80211/util.c:294 [inline]
ieee80211_handle_wake_tx_queue+0x118/0x274 net/mac80211/util.c:315
drv_wake_tx_queue net/mac80211/driver-ops.h:1350 [inline]
schedule_and_wake_txq net/mac80211/driver-ops.h:1357 [inline]
ieee80211_queue_skb+0x18e8/0x2244 net/mac80211/tx.c:1664
ieee80211_tx+0x260/0x400 net/mac80211/tx.c:1966
ieee80211_xmit+0x278/0x354 net/mac80211/tx.c:2062
__ieee80211_subif_start_xmit+0xab8/0x122c net/mac80211/tx.c:4338
ieee80211_subif_start_xmit+0xe0/0x438 net/mac80211/tx.c:4532
__netdev_start_xmit include/linux/netdevice.h:4903 [inline]
netdev_start_xmit include/linux/netdevice.h:4917 [inline]
xmit_one net/core/dev.c:3531 [inline]
dev_hard_start_xmit+0x27c/0x938 net/core/dev.c:3547
__dev_queue_xmit+0x1678/0x33fc net/core/dev.c:4341
dev_queue_xmit include/linux/netdevice.h:3091 [inline]
neigh_resolve_output+0x558/0x658 net/core/neighbour.c:1563
neigh_output include/net/neighbour.h:542 [inline]
ip6_fini
---truncated---
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于wifi:cfg80211模块中允许将NL80211_ATTR_TXQ_QUANTUM设置为2^31，这可能导致软锁。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2024-42114 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2024-42114 的情报信息
请登录查看更多情报信息。
CVE-2024-42114 其他参考 (6)
同批安全公告 · Linux · 2024-07-30 · 共 70 条
| CVE-2024-42108 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-42225 | 8.3 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42162 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42115 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42117 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42112 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42111 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42109 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42120 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42105 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42104 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42103 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42099 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42132 | 7.6 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42133 | 7.6 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42152 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42110 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42145 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42123 | 7.0 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-42224 | 7.0 HIGH | Linux kernel 安全漏洞 |
显示前 20 条，共 70 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-42114
暂无评论