CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's KCM (Kernel Connection Multiplexor) functionality, specifically during the replacement and restoration of lower TCP socket callbacks. This flaw can lead to inconsistent callback execution across multiple CPUs, potentially causing stale or misdirected wakeups, which can disrupt network communication. Organizations using Linux systems that rely on KCM should prioritize addressing this issue to maintain the integrity and reliability of their network operations.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket callbacks kcm_attach() replaces a live lower TCP socket's sk_data_ready and sk_write_space callbacks with KCM handlers, and kcm_unattach() restores them later. Those callback-pointer updates are still plain stores even though the same fields can be read and invoked concurrently on other CPUs. If another CPU observes an older callback snapshot after the live field has already been restored, callback execution can run with a mismatched target and sk_user_data state, leading to stale or misdirected wakeups. Use WRITE_ONCE() for the callback replacement and restore operations so these shared callback fields follow the same visibility contract already established by the earlier 4022 fixes.