CVE-2024-57948

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mac802154: check local interfaces before deleting sdata list

syzkaller reported a corrupted list in ieee802154_if_remove. [1]

Remove an IEEE 802.15.4 network interface after unregister an IEEE 802.15.4

hardware device from the system.

CPU0 CPU1

==== ====

genl_family_rcv_msg_doit ieee802154_unregister_hw

ieee802154_del_iface ieee802154_remove_interfaces

rdev_del_virtual_intf_deprecated list_del(&sdata->list)

ieee802154_if_remove

list_del_rcu

The net device has been unregistered, since the rcu grace period,

unregistration must be run before ieee802154_if_remove.

To avoid this issue, add a check for local->interfaces before deleting

sdata list.

[1]

kernel BUG at lib/list_debug.c:58!

Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI

CPU: 0 UID: 0 PID: 6277 Comm: syz-executor157 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BI

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References