CVE-2024-35929

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()

For the kernels built with CONFIG_RCU_NOCB_CPU_DEFAULT_ALL=y and

CONFIG_RCU_LAZY=y, the following scenarios will trigger WARN_ON_ONCE()

in the rcu_nocb_bypass_lock() and rcu_nocb_wait_contended() functions:

CPU2 CPU11

kthread

rcu_nocb_cb_kthread ksys_write

rcu_do_batch vfs_write

rcu_torture_timer_cb proc_sys_write

__kmem_cache_free proc_sys_call_handler

kmemleak_free drop_caches_sysctl_handler

delete_object_full drop_slab

__delete_object shrink_slab

put_object lazy_rcu_shrink_sca

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References