Executive Summary

This vulnerability exists in the Linux kernel's IP Virtual Server (ipvs) component. It involves a race condition between the netdev notifier function ip_vs_dst_event() and the code that caches destination routes (dst) associated with network devices (dev) that are shutting down. Because the Forwarding Information Base (FIB) can notify about a closed device after the handler finishes, a valid route may be returned and cached incorrectly. This results in a leaked reference to a device that should no longer be active. The fix involves adding a check using netif_running() to ensure that the notifier handler does not attach a new destination to a device that is in the process of closing.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to a leaked reference to a network device that is shutting down. Such a leak may cause resource management issues within the kernel, potentially leading to instability or unexpected behavior in network routing. While the description does not specify direct security impacts such as privilege escalation or denial of service, the improper caching of routes could affect network reliability or performance.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability has been resolved in the Linux kernel by adding a netif_running() check to ensure the notifier handler is not running for a device that is closing. Therefore, the immediate step to mitigate this vulnerability is to update your Linux kernel to the version that includes this fix.

Useful 0 Not Useful 0