In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have gone down, but they still happen sometimes. In a memory constrained environment like the kdump image, a softlockup is not just a harmless message, but it can interfere with things like RCU freeing memory, causing the crashdump to get stuck. The second loop in __read_vmcore has a lot more opportunities for natural sleep points, like scheduling out while waiting for a data write to happen, but apparently that is not always enough. Add a cond_resched() to the second loop in __read_vmcore to (hopefully) get rid of the softlockups.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fs/proc: fix softlockup in __read_vmcore (parte 2) Desde el commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore"), la cantidad de softlockups en __read_vmcore en el momento de kdump ha disminuido, pero aún ocurren a veces. En un entorno con restricciones de memoria como la imagen kdump, un softlockup no es solo un mensaje inofensivo, sino que puede interferir con cosas como la liberación de memoria por parte de RCU, lo que hace que el crashdump se quede atascado. El segundo bucle en __read_vmcore tiene muchas más oportunidades para puntos de suspensión naturales, como programar la salida mientras se espera que se escriban datos, pero aparentemente eso no siempre es suficiente. Agregue un cond_resched() al segundo bucle en __read_vmcore para (con suerte) deshacerse de los softlockups.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd384a820c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3406e0880> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b77bdc0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3406e3f40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd369318940> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3406e13c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b77a380> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd3406e21c0> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd31b0e7bc0> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd36a71ab40> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd3694f0340> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd342602340> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd3406e2680> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd342601f80> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:* |