CVE-2024-27390
Published: May 1, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 ("ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()")) I think the synchronize_net() call in ipv6_mc_down() is not needed. Under load, synchronize_net() can last between 200 usec and 5 ms. KASAN seems to agree as well.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected f185de28d9ae6c978135993769352e523ee8df06 - < 9d159d6637ccce25f879d662a480541ef4ba3a50affected f185de28d9ae6c978135993769352e523ee8df06 - < a03ede2282ebbd181bd6f5c38cbfcb5765afcd04affected f185de28d9ae6c978135993769352e523ee8df06 - < 26d4bac55750d535f1f0b8790dc26daf6089e373affected f185de28d9ae6c978135993769352e523ee8df06 - < 7eb06ee5921189812e6b4bfe7b0f1e878be16df7affected f185de28d9ae6c978135993769352e523ee8df06 - < 5da9a218340a2bc804dc4327e5804392e24a0b88+1 more versions |
Linux | Linux | affected 5.13unaffected 0 - < 5.13unaffected 5.15.153 - <= 5.15.*unaffected 6.1.83 - <= 6.1.*unaffected 6.6.23 - <= 6.6.*+3 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now