CVE-2024-27390
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In the Linux kernel, an unnecessary synchronize_net() call was removed from the ipv6_mc_down() function. This call caused delays from 200 microseconds to 5 milliseconds under load.
Risk Assessment
Removing this barrier improves IPv6 multicast network performance, reducing latency and potential packet drops.
Recommendation
Update the Linux kernel to a version containing this fix to avoid unnecessary delays in IPv6 multicast handling.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 ("ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()")) I think the synchronize_net() call in ipv6_mc_down() is not needed. Under load, synchronize_net() can last between 200 usec and 5 ms. KASAN seems to agree as well.