Linux Kernel RCU Protection Vulnerability in Bonding Driver

A vulnerability in the Linux kernel bonding driver has been addressed, which involved inadequate Read-Copy-Update (RCU) protection. The issue arose in the 'bond_ethtool_get_ts_info' function, which can be called via 'setsockopt' without the necessary RCU lock, potentially leading to race conditions. This vulnerability was highlighted by syzbot, a kernel fuzzer that discovered the missing RCU protection could be exploited through socket options, creating a risk of improper synchronization and data handling.

Impact

The vulnerability could lead to race conditions, where the timing of events can be manipulated, potentially causing inconsistent data states or unexpected behavior in the network bonding functionality.