can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). syzbot reported a warning in bcm_release(). [0] The blamed change fixed another warning that is triggered when connect() is issued again for a socket whose connect()ed device has been unregistered. However, if the socket is just close()d without the 2nd connect(), the remaining bo->bcm_proc_read triggers unnecessary remove_proc_entry() in bcm_release(). Let's clear bo->bcm_proc_read after remove_proc_entry() in bcm_notify(). [0] name '4986' WARNING: CPU: 0 PID: 5234 at fs/proc/generic.c:711 remove_proc_entry+0x2e7/0x5d0 fs/proc/generic.c:711 Modules linked in: CPU: 0 UID: 0 PID: 5234 Comm: syz-executor606 Not tainted 6.11.0-rc5-syzkaller-00178-g5517ae241919 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:remove_proc_entry+0x2e7/0x5d0 fs/proc/generic.c:711 Code: ff eb 05 e8 cb 1e 5e ff 48 8b 5c 24 10 48 c7 c7 e0 f7 aa 8e e8 2a 38 8e 09 90 48 c7 c7 60 3a 1b 8c 48 89 de e8 da 42 20 ff 90 <0f> 0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 RSP: 0018:ffffc9000345fa20 EFLAGS: 00010246 RAX: 2a2d0aee2eb64600 RBX: ffff888032f1f548 RCX: ffff888029431e00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000345fb08 R08: ffffffff8155b2f2 R09: 1ffff1101710519a R10: dffffc0000000000 R11: ffffed101710519b R12: ffff888011d38640 R13: 0000000000000004 R14: 000000000000000
CVE-2024-47709
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-47709
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5c680022c4e28ba18ea500f3e29f0428271afa92",
"lessThan": "f5059fae5ed518fc56494ce5bdd4f5360de4b3bc",
"versionType": "git"
},
{
"status": "affected",
"version": "33ed4ba73caae39f34ab874ba79138badc2c65dd",
"lessThan": "a833da8eec20b51af39643faa7067b25c8b20f3e",
"versionType": "git"
},
{
"status": "affected",
"version": "aec92dbebdbec7567d9f56d7c9296a572b8fd849",
"lessThan": "5cc00913c1fdcab861c4e65fa20d1f1e1bbbf977",
"versionType": "git"
},
{
"status": "affected",
"version": "10bfacbd5e8d821011d857bee73310457c9c989a",
"lessThan": "9550baada4c8ef8cebefccc746384842820b4dff",
"versionType": "git"
},
{
"status": "affected",
"version": "3b39dc2901aa7a679a5ca981a3de9f8d5658afe8",
"lessThan": "7a145d6ec2124bdb94bd6fc436b342ff6ddf2b70",
"versionType": "git"
},
{
"status": "affected",
"version": "4377b79323df62eb5d310354f19b4d130ff58d50",
"lessThan": "c3d941cc734e0c8dc486c062926d5249070af5e4",
"versionType": "git"
},
{
"status": "affected",
"version": "abb0a615569ec008e8a93d9f3ab2d5b418ea94d4",
"lessThan": "770b463264426cc3c167b1d44efa85f6a526ce5b",
"versionType": "git"
},
{
"status": "affected",
"version": "76fe372ccb81b0c89b6cd2fec26e2f38c958be85",
"lessThan": "b02ed2f01240b226570b4a19b5041d61f5125784",
"versionType": "git"
},
{
"status": "affected",
"version": "76fe372ccb81b0c89b6cd2fec26e2f38c958be85",
"lessThan": "94b0818fa63555a65f6ba107080659ea6bcca63e",
"versionType": "git"
},
{
"status": "affected",
"version": "4.19.322",
"lessThan": "4.19.323",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.4.284",
"lessThan": "5.4.285",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.10.226",
"lessThan": "5.10.227",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.167",
"lessThan": "5.15.168",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.110",
"lessThan": "6.1.113",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.6.51",
"lessThan": "6.6.54",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.10.10",
"lessThan": "6.10.13",
"versionType": "semver"
}
],
"programFiles": [
"net/can/bcm.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.11"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.11",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.19.323",
"versionType": "semver",
"lessThanOrEqual": "4.19.*"
},
{
"status": "unaffected",
"version": "5.4.285",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.227",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.168",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.113",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.54",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.10.13",
"versionType": "semver",
"lessThanOrEqual": "6.10.*"
},
{
"status": "unaffected",
"version": "6.11.2",
"versionType": "semver",
"lessThanOrEqual": "6.11.*"
},
{
"status": "unaffected",
"version": "6.12",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"net/can/bcm.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-47709
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #26733 · Revision 1
- Added to Heist Feed
- Publisher date