CVE-2024-40905: 
Linux Kernel vulnerability analysis and mitigation

A race condition vulnerability (CVE-2024-40905) was discovered in the Linux kernel's IPv6 implementation, specifically in the __fib6_drop_pcpu_from() function. The vulnerability was identified by syzbot and affects Linux kernel versions from 4.2 up to versions before 5.4.279, 5.10.221, 5.15.162, 6.1.95, and 6.9.6 (NVD).

The vulnerability occurs when the compiler reads (*ppcpu_rt) more than once, where the second read could return NULL if another CPU clears the value in rt6_get_pcpu_route(). The issue is classified as a NULL pointer dereference vulnerability (CWE-476). The CVSS v3.1 base score is 4.7 (Medium) with vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

A successful exploitation of this vulnerability could lead to a denial of service condition through a system crash. The vulnerability requires local access and high complexity to exploit, but could affect system availability (NVD).

The vulnerability requires local access and high complexity to exploit. It was discovered through syzbot testing and has been confirmed to cause a general protection fault when triggered (Kernel Patch).

The vulnerability has been fixed by adding READ_ONCE() to prevent the race condition and implementing rcu_read_lock()/rcu_read_unlock() for RCU protection while dereferencing pcpu_rt. Users should update to patched kernel versions: 5.4.279 or later, 5.10.221 or later, 5.15.162 or later, 6.1.95 or later, or 6.9.6 or later (NVD).