CVE-2024-27013— tun: limit printing rate when illegal packet received by tun dev
Possible ATT&CK Techniques 2AI
T1499.002 · Service Exhaustion Flood T1499 · Endpoint Denial of ServiceAffected Version Matrix 18
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | ef3db4a5954281bc1ea49a4739c88eaea091dc71< 68459b8e3ee554ce71878af9eb69659b9462c588 | affected |
ef3db4a5954281bc1ea49a4739c88eaea091dc71< 4b0dcae5c4797bf31c63011ed62917210d3fdac3 | affected | ||
ef3db4a5954281bc1ea49a4739c88eaea091dc71< 14cdb43dbc827e18ac7d5b30c5b4c676219f1421 | affected | ||
ef3db4a5954281bc1ea49a4739c88eaea091dc71< a50dbeca28acf7051dfa92786b85f704c75db6eb | affected | ||
ef3db4a5954281bc1ea49a4739c88eaea091dc71< 62e27ef18eb4f0d33bbae8e9ef56b99696a74713 | affected | ||
ef3db4a5954281bc1ea49a4739c88eaea091dc71< 40f4ced305c6c47487d3cd8da54676e2acc1a6ad | affected | ||
ef3db4a5954281bc1ea49a4739c88eaea091dc71< 52854101180beccdb9dc2077a3bea31b6ad48dfa | affected | ||
ef3db4a5954281bc1ea49a4739c88eaea091dc71< f8bbc07ac535593139c875ffa19af924b1084540 | affected | ||
| … +10 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-27013
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
tun: limit printing rate when illegal packet received by tun dev
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhost_worker will call tun call backs to receive packets. If too many illegal packets arrives, tun_do_read will keep dumping packet contents. When console is enabled, it will costs much more cpu time to dump packet and soft lockup will be detected. net_ratelimit mechanism can be used to limit the dumping rate. PID: 33036 TASK: ffff949da6f20000 CPU: 23 COMMAND: "vhost-32980" #0 [fffffe00003fce50] crash_nmi_callback at ffffffff89249253 #1 [fffffe00003fce58] nmi_handle at ffffffff89225fa3 #2 [fffffe00003fceb0] default_do_nmi at ffffffff8922642e #3 [fffffe00003fced0] do_nmi at ffffffff8922660d #4 [fffffe00003fcef0] end_repeat_nmi at ffffffff89c01663 [exception RIP: io_serial_in+20] RIP: ffffffff89792594 RSP: ffffa655314979e8 RFLAGS: 00000002 RAX: ffffffff89792500 RBX: ffffffff8af428a0 RCX: 0000000000000000 RDX: 00000000000003fd RSI: 0000000000000005 RDI: ffffffff8af428a0 RBP: 0000000000002710 R8: 0000000000000004 R9: 000000000000000f R10: 0000000000000000 R11: ffffffff8acbf64f R12: 0000000000000020 R13: ffffffff8acbf698 R14: 0000000000000058 R15: 0000000000000000 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #5 [ffffa655314979e8] io_serial_in at ffffffff89792594 #6 [ffffa655314979e8] wait_for_xmitr at ffffffff89793470 #7 [ffffa65531497a08] serial8250_console_putchar at ffffffff897934f6 #8 [ffffa65531497a20] uart_console_write at ffffffff8978b605 #9 [ffffa65531497a48] serial8250_console_write at ffffffff89796558 #10 [ffffa65531497ac8] console_unlock at ffffffff89316124 #11 [ffffa65531497b10] vprintk_emit at ffffffff89317c07 #12 [ffffa65531497b68] printk at ffffffff89318306 #13 [ffffa65531497bc8] print_hex_dump at ffffffff89650765 #14 [ffffa65531497ca8] tun_do_read at ffffffffc0b06c27 [tun] #15 [ffffa65531497d38] tun_recvmsg at ffffffffc0b06e34 [tun] #16 [ffffa65531497d68] handle_rx at ffffffffc0c5d682 [vhost_net] #17 [ffffa65531497ed0] vhost_worker at ffffffffc0c644dc [vhost] #18 [ffffa65531497f10] kthread at ffffffff892d2e72 #19 [ffffa65531497f50] ret_from_fork at ffffffff89c0022f
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于太多非法数据包到达时，tundo_read将继续转储数据包内容，导致消耗过多cpu资源。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-27013
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-27013
请登录查看更多情报信息。
Mailing List Discussions for CVE-2024-27013 (2)
Other References for CVE-2024-27013 (7)
Same Patch Batch · Linux · 2024-05-01 · 159 CVEs total
| CVE-2024-27388 | 9.8 CRITICAL | SUNRPC: fix some memleaks in gssx_dec_option_array |
| CVE-2024-26953 | 9.8 CRITICAL | net: esp: fix bad handling of pages from page_pool |
| CVE-2024-26931 | 8.8 HIGH | scsi: qla2xxx: Fix command flush on cable pull |
| CVE-2024-27053 | 8.8 HIGH | wifi: wilc1000: fix RCU usage in connect path |
| CVE-2024-26990 | 8.8 HIGH | KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status |
| CVE-2024-26952 | 8.3 HIGH | ksmbd: fix potencial out-of-bounds when buffer offset is invalid |
| CVE-2024-27018 | 8.2 HIGH | netfilter: br_netfilter: skip conntrack input hook for promisc packets |
| CVE-2024-26936 | 8.2 HIGH | ksmbd: validate request buffer size in smb2_allocate_rsp_buf() |
| CVE-2024-26980 | 8.2 HIGH | ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf |
| CVE-2024-26954 | 8.1 HIGH | ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() |
| CVE-2024-26994 | 7.8 HIGH | speakup: Avoid crash on very long word |
| CVE-2024-26966 | 7.8 HIGH | clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays |
| CVE-2024-26974 | 7.8 HIGH | crypto: qat - resolve race condition during AER recovery |
| CVE-2024-26976 | 7.8 HIGH | KVM: Always flush async #PF workqueue when vCPU is being destroyed |
| CVE-2024-27062 | 7.8 HIGH | nouveau: lock the client object tree. |
| CVE-2024-27061 | 7.8 HIGH | crypto: sun8i-ce - Fix use after free in unprepare |
| CVE-2024-26983 | 7.8 HIGH | bootconfig: use memblock_free_late to free xbc memory to buddy |
| CVE-2024-27058 | 7.8 HIGH | tmpfs: fix race on handling dquot rbtree |
| CVE-2024-27056 | 7.8 HIGH | wifi: iwlwifi: mvm: ensure offloading TID queue exists |
| CVE-2024-27017 | 7.8 HIGH | netfilter: nft_set_pipapo: walk over current view on netlink dump |
Showing top 20 of 159 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-64604
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is - CVE-2026-64602
iio: adc: spear: Initialize completion before requesting IRQ - CVE-2026-64603
platform/x86: intel-hid: Protect ACPI notify handler against - CVE-2026-64601
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_ - CVE-2026-64598
smb/client: Fix error code in smb2_aead_req_alloc()
Same vendor: Linux
- CVE-2026-64604
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is - CVE-2026-64602
iio: adc: spear: Initialize completion before requesting IRQ - CVE-2026-64603
platform/x86: intel-hid: Protect ACPI notify handler against - CVE-2026-64601
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_ - CVE-2026-64598
smb/client: Fix error code in smb2_aead_req_alloc()
V. Comments for CVE-2024-27013
No comments yet