CVE-2024-41081

CriticalCVSS 9.8

Published: 29/07/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

In the Linux kernel's ILA module, ila_output() does not block bottom halves (BH), which can lead to a race condition and corruption of dst_cache structures. The fix uses local_bh_disable().

Risk Assessment

May lead to data corruption, system crash, or potential privilege escalation.

Recommendation

Apply the Linux kernel update that includes the fix for this issue.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable().