CVE-2024-27390

ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()

MEDIUM

5.5

CVSS Score

Published: May 1, 2024 at 01:05 PM UTC

Updated: July 24, 2026 at 03:33 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 ("ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()")) I think the synchronize_net() call in ipv6_mc_down() is not needed. Under load, synchronize_net() can last between 200 usec and 5 ms. KASAN seems to agree as well.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.13 ≤ v < 5.15.1535.13 ≤ v < 6.1.835.13 ≤ v < 6.6.235.13 ≤ v < 6.7.115.13 ≤ v < 6.8.25.13 ≤ v < 6.95.16 ≤ v < 6.1.836.2 ≤ v < 6.6.236.7 ≤ v < 6.7.116.8 ≤ v < 6.8.25.1394d6a071ab2f26eb18a83109940db0cec19552fdf185de28d9ae6c978135993769352e523ee8df06

Vendor states this is fixed in 17ef8efc00b34918b966388b2af0993811895a8c (fixed)

Vendor states this is fixed in 26d4bac55750d535f1f0b8790dc26daf6089e373 (fixed)

Vendor states this is fixed in 5da9a218340a2bc804dc4327e5804392e24a0b88 (fixed)

Vendor states this is fixed in 7eb06ee5921189812e6b4bfe7b0f1e878be16df7 (fixed)

Vendor states this is fixed in 9d159d6637ccce25f879d662a480541ef4ba3a50 (fixed)

Vendor states this is fixed in a03ede2282ebbd181bd6f5c38cbfcb5765afcd04 (fixed)

Vendor states this is fixed in bfd2f3c58ad86ad33db80515e6c3503e0414e44b (fixed)

Vendor states this is fixed in 5.13 (unaffected)

Vendor states this is fixed in 5.15.153 (unaffected)

Vendor states this is fixed in 6.1.83 (unaffected)

Vendor states this is fixed in 6.6.23 (unaffected)

Vendor states this is fixed in 6.7.11 (unaffected)