CVE-2024-50155

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: use cond_resched() in nsim_dev_trap_report_work()

I am still seeing many syzbot reports hinting that syzbot

might fool nsim_dev_trap_report_work() with hundreds of ports [1]

Lets use cond_resched(), and system_unbound_wq

instead of implicit system_wq.

[1]

INFO: task syz-executor:20633 blocked for more than 143 seconds.

Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

task:syz-executor state:D stack:25856 pid:20633 tgid:20633 ppid:1 flags:0x00004006

...

NMI backtrace for cpu 1

CPU: 1 UID: 0 PID: 16760 Comm: kworker/1:0 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024

Workqueue: events nsim_dev_trap_report_work

RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210

Code: 89 fb e8 23 00 00 00 48 8b 3d 04 fb 9c

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References