发布时间: 2024年5月17日
修改时间: 2024年6月13日
In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time and the process has NR_THREADS, it will spin with irqs disabled O(NR_CPUS * NR_THREADS) time. Change do_task_stat() to use sig->stats_lock to gather the statistics outside of ->siglock protected section, in the likely case this code will run lockless.
| NVD | openEuler | |
|---|---|---|
| CVSS评分 | 5.5 | |
| Attack Vector | Local | |
| Attack Complexity | Low | |
| Privileges Required | Low | |
| User Interaction | None | |
| Scope | Unchanged | |
| Confidentiality | None | |
| Integrity | None | |
| Availability | High |
| 公告名 | 概要 | 发布时间 |
|---|---|---|
| KylinSec-SA-2024-4777 | kernel security update | 2024年5月17日 |
| KylinSec-SA-2024-4953 | kernel security update | 2024年5月24日 |
| 产品 | 包 | 状态 |
|---|---|---|
| KY3.4-4A | kernel | Fixed |
| KY3.4-5A | kernel | Fixed |
| KY3.5.1 | kernel | Fixed |
| KY3.5.2 | kernel | Fixed |
| V6 | kernel | Unaffected |
