CVE-2024-56770— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于netem网络调度器在处理子qdisc时，未能正确更新其qlen值以反映子qdisc的包数量变化，导致在达到配置的sch->limit时错误地停止接受新包，影响网络流量的正常传输。
可能的 ATT&CK 技术 1 AI
T1498 · Network Denial of Service影响版本矩阵 16
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 50612537e9ab29693122fab20fc1eed235054ffe< 83c6ab12f08dcc09d4c5ac86fdb89736b28f1d31 |
affected |
50612537e9ab29693122fab20fc1eed235054ffe< 216509dda290f6db92c816dd54b83c1df9da9e76 |
affected | ||
50612537e9ab29693122fab20fc1eed235054ffe< c2047b0e216c8edce227d7c42f99ac2877dad0e4 |
affected | ||
50612537e9ab29693122fab20fc1eed235054ffe< 10df49cfca73dfbbdb6c4150d859f7e8926ae427 |
affected | ||
50612537e9ab29693122fab20fc1eed235054ffe< 3824c5fad18eeb7abe0c4fc966f29959552dca3e |
affected | ||
50612537e9ab29693122fab20fc1eed235054ffe< 356078a5c55ec8d2061fcc009fb8599f5b0527f9 |
affected | ||
50612537e9ab29693122fab20fc1eed235054ffe< f8d4bc455047cf3903cd6f85f49978987dbb3027 |
affected | ||
3.3 |
affected | ||
| … +8 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2024-56770 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
net/sched: netem: account for backlog updates from child qdisc
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
net/sched: netem: account for backlog updates from child qdisc
In general, 'qlen' of any classful qdisc should keep track of the
number of packets that the qdisc itself and all of its children holds.
In case of netem, 'qlen' only accounts for the packets in its internal
tfifo. When netem is used with a child qdisc, the child qdisc can use
'qdisc_tree_reduce_backlog' to inform its parent, netem, about created
or dropped SKBs. This function updates 'qlen' and the backlog statistics
of netem, but netem does not account for changes made by a child qdisc.
'qlen' then indicates the wrong number of packets in the tfifo.
If a child qdisc creates new SKBs during enqueue and informs its parent
about this, netem's 'qlen' value is increased. When netem dequeues the
newly created SKBs from the child, the 'qlen' in netem is not updated.
If 'qlen' reaches the configured sch->limit, the enqueue function stops
working, even though the tfifo is not full.
Reproduce the bug:
Ensure that the sender machine has GSO enabled. Configure netem as root
qdisc and tbf as its child on the outgoing interface of the machine
as follows:
$ tc qdisc add dev <oif> root handle 1: netem delay 100ms limit 100
$ tc qdisc add dev <oif> parent 1:0 tbf rate 50Mbit burst 1542 latency 50ms
Send bulk TCP traffic out via this interface, e.g., by running an iPerf3
client on the machine. Check the qdisc statistics:
$ tc -s qdisc show dev <oif>
Statistics after 10s of iPerf3 TCP test before the fix (note that
netem's backlog > limit, netem stopped accepting packets):
qdisc netem 1: root refcnt 2 limit 1000 delay 100ms
Sent 2767766 bytes 1848 pkt (dropped 652, overlimits 0 requeues 0)
backlog 4294528236b 1155p requeues 0
qdisc tbf 10: parent 1:1 rate 50Mbit burst 1537b lat 50ms
Sent 2767766 bytes 1848 pkt (dropped 327, overlimits 7601 requeues 0)
backlog 0b 0p requeues 0
Statistics after the fix:
qdisc netem 1: root refcnt 2 limit 1000 delay 100ms
Sent 37766372 bytes 24974 pkt (dropped 9, overlimits 0 requeues 0)
backlog 0b 0p requeues 0
qdisc tbf 10: parent 1:1 rate 50Mbit burst 1537b lat 50ms
Sent 37766372 bytes 24974 pkt (dropped 327, overlimits 96017 requeues 0)
backlog 0b 0p requeues 0
tbf segments the GSO SKBs (tbf_segment) and updates the netem's 'qlen'.
The interface fully stops transferring packets and "locks". In this case,
the child qdisc and tfifo are empty, but 'qlen' indicates the tfifo is at
its limit and no more packets are accepted.
This patch adds a counter for the entries in the tfifo. Netem's 'qlen' is
only decreased when a packet is returned by its dequeue function, and not
during enqueuing into the child qdisc. External updates to 'qlen' are thus
accounted for and only the behavior of the backlog statistics changes. As
in other qdiscs, 'qlen' then keeps track of how many packets are held in
netem and all of its children. As before, sch->limit remains as the
maximum number of packets in the tfifo. The same applies to netem's
backlog statistics.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于netem网络调度器在处理子qdisc时，未能正确更新其qlen值以反映子qdisc的包数量变化，导致在达到配置的sch->limit时错误地停止接受新包，影响网络流量的正常传输。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2024-56770 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2024-56770 的情报信息
请登录查看更多情报信息。
CVE-2024-56770 补丁与修复 (7)
同批安全公告 · Linux · 2025-01-08 · 共 16 条
| CVE-2024-56779 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-56775 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-56784 | 7.8 HIGH | Linux kernel 缓冲区错误漏洞 |
| CVE-2024-56771 | Linux kernel 安全漏洞 | |
| CVE-2024-56773 | Linux kernel 代码问题漏洞 | |
| CVE-2024-56772 | Linux kernel 资源管理错误漏洞 | |
| CVE-2024-56774 | Linux kernel 代码问题漏洞 | |
| CVE-2024-56776 | Linux kernel 代码问题漏洞 | |
| CVE-2024-56777 | Linux kernel 代码问题漏洞 | |
| CVE-2024-56778 | Linux kernel 代码问题漏洞 | |
| CVE-2024-56780 | Linux kernel 安全漏洞 | |
| CVE-2024-56782 | Linux kernel 代码问题漏洞 | |
| CVE-2024-56783 | Linux kernel 安全漏洞 | |
| CVE-2024-56785 | Linux kernel 安全漏洞 | |
| CVE-2024-56787 | Linux kernel 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2024-56770
暂无评论