CVE-2024-47696

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit aee2424246f9 ("RDMA/iwcm: Fix a use-after-free related to destroying CM IDs"), the function flush_workqueue is invoked to flush the work queue iwcm_wq. But at that time, the work queue iwcm_wq was created via the function alloc_ordered_workqueue without the flag WQ_MEM_RECLAIM. Because the current process is trying to flush the whole iwcm_wq, if iwcm_wq doesn't have the flag WQ_MEM_RECLAIM, verify that the current process is not reclaiming me...

Affected product and versions

Product

Linux Linux, RUGGEDCOM RST2428P, SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family

Affected versions

>= d91d253c87fd1efece521ff2612078a35af673c6 < da2708a19f45b4a7278adf523837c8db21d1e2b5, >= 7f25f296fc9bd0435be14e89bf657cd615a23574 < 29b3bbd912b8db86df7a3c180b910ccb621f5635, >= 94ee7ff99b87435ec63211f632918dc7f44dac79 < 2efe8da2ddbf873385b4bc55366d09350b408df6, >= 557d035fe88d78dd51664f4dc0e1896c04c97cf6 < da0392698c62397c19deb1b9e9bdf2fbb5a9420e, >= dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 < a64f30db12bdc937c5108158d98c8eab1925c548, >= ff5bbbdee08287d75d72e65b72a2b76d9637892a < 8b7df76356d098f85f3bd2c7cf6fb43f531893d7, >= ee39384ee787e86e9db4efb843818ef0ea9cb8ae < c8b18a75282cfd27822a8cc3c1f005c1ac8d1a58, >= aee2424246f9f1dadc33faa78990c1e2eb7826e4 < a09dc967b3c58899e259c0aea092f421d22a0b04, >= aee2424246f9f1dadc33faa78990c1e2eb7826e4 < 86dfdd8288907f03c18b7fb462e0e232c4f98d89, >= 4.19.320 < 4.19.323, >= 5.4.282 < 5.4.285, >= 5.10.224 < 5.10.227, >= 5.15.165 < 5.15.168, >= 6.1.103 < 6.1.113, >= 6.6.44 < 6.6.54, >= 6.10.3 < 6.10.13, >= 6.11, < V3.2, >= 4.19.320 < 5.4, >= 5.4.282 < 5.10

Fixed versions

5.4, 5.10, 5.10.227, 5.15.168, 6.1.113, 6.6.54, 6.10.13, 6.11.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416