Race Condition Vulnerability in Linux Kernel's ILA Implementation

CVE-2024-57900

Summary

A race condition in the Linux kernel's Ingress Locator Adjustment (ILA) feature can potentially allow multiple threads to execute the command to add mappings simultaneously. This creates a scenario where calls to register network hooks can occur concurrently, leading to unforeseen behavior and potential system instability. The vulnerability was identified by syzbot, which demonstrated a concurrent processing issue during ILA_CMD_ADD operations. This bug can result in a use-after-free error in the kernel, specifically noted in the rhashtable implementation. A mutex has been added to ensure that only one thread can call the network hook registration function at a time, mitigating the risk associated with this race condition.

References