CVE-2024-57900: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-57900 is a race condition vulnerability discovered in the Linux kernel's ILA (Identifier Locator Addressing) subsystem. The vulnerability was discovered by syzbot and disclosed on January 15, 2025. The issue specifically affects the ila_add_mapping() function, where concurrent ILA_CMD_ADD commands could lead to a race condition. This vulnerability affects Linux kernel versions from 4.5 up to versions before 5.4.289, 5.10.233, 5.15.176, 6.1.124, and other versions in between (NVD).

The vulnerability stems from a race condition in the ila_add_mapping() function within the Linux kernel's ILA translation facility. The issue manifests as a slab-use-after-free bug in the rhashtable implementation, specifically in the rht_key_hashfn function. The bug occurs when multiple threads attempt to register network hooks simultaneously through nf_register_net_hooks(). The vulnerability was identified through KASAN (Kernel Address Sanitizer) which detected the use-after-free condition during execution (Kernel Patch). The CVSS v3.1 base score for this vulnerability is 7.8 (High), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability can lead to a use-after-free condition in the kernel, potentially resulting in privilege escalation, denial of service, or information leaks. The issue affects the kernel's networking stack, specifically the ILA translation facility, which could impact network operations and security (NVD).

The vulnerability has been fixed by adding mutex protection around the nf_register_net_hooks() call in the ila_add_mapping() function. The fix involves using DEFINE_MUTEX(ila_mutex) to ensure that only one thread can register network hooks at a time. The patch has been merged into the mainline kernel and backported to affected stable kernel versions (Kernel Patch).