CVE-2024-26681

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: avoid potential loop in nsim_dev_trap_report_work()

Many syzbot reports include the following trace [1]

If nsim_dev_trap_report_work() can not grab the mutex,

it should rearm itself at least one jiffie later.

[1]

Sending NMI from CPU 1 to CPUs 0:

NMI backtrace for cpu 0

CPU: 0 PID: 32383 Comm: kworker/0:2 Not tainted 6.8.0-rc2-syzkaller-00031-g861c0981648f #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023

Workqueue: events nsim_dev_trap_report_work

RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:89 [inline]

RIP: 0010:memory_is_nonzero mm/kasan/generic.c:104 [inline]

RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:129 [inline]

RIP: 0010:memory_is_poisoned mm/kasan/generic.c:161 [inline]

RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]

RIP: 0010:kasan_check_range+0x101/0x190 mm/kasan/generic.c:189

Code: 07 49 39 d1 75 0a 45 3a 11 b8 01 00 00 00

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References