CVE-2024-38596

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg

A data-race condition has been identified in af_unix. In one data path,

the write function unix_release_sock() atomically writes to

sk->sk_shutdown using WRITE_ONCE. However, on the reader side,

unix_stream_sendmsg() does not read it atomically. Consequently, this

issue is causing the following KCSAN splat to occur:

BUG: KCSAN: data-race in unix_release_sock / unix_stream_sendmsg

write (marked) to 0xffff88867256ddbb of 1 bytes by task 7270 on cpu 28:

unix_release_sock (net/unix/af_unix.c:640)

unix_release (net/unix/af_unix.c:1050)

sock_close (net/socket.c:659 net/socket.c:1421)

__fput (fs/file_table.c:422)

__fput_sync (fs/file_table.c:508)

__se_sys_close (fs/open.c:1559 fs/open.c:1541)

__x64_sys_close (fs/open.c:1541)

x64_sys_call (arch/x86/entry/syscall_64.c:33)

do_syscall_64 (arch/x86/entry/common.c:?)

entry_SYSCALL_64_after_hwframe (arc

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References