• CVE-2024-41080

发布时间: 2024年8月9日

修改时间: 2024年10月18日

概要

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix possible deadlock in io_register_iowq_max_workers() The io_register_iowq_max_workers() function calls io_put_sq_data(), which acquires the sqd->lock without releasing the uring_lock. Similar to the commit 009ad9f0c6ee ("io_uring: drop ctx->uring_lock before acquiring sqd->lock"), this can lead to a potential deadlock situation. To resolve this issue, the uring_lock is released before calling io_put_sq_data(), and then it is re-acquired after the function call. This change ensures that the locks are acquired in the correct order, preventing the possibility of a deadlock.

CVSS v3 指标

NVD openEuler
Confidentiality None None
Attack Vector Local Adjacent
CVSS评分 5.5 5.7
Attack Complexity Low Low
Privileges Required Low Low
Scope Unchanged Unchanged
Integrity None None
User Interaction None None
Availability High High

安全公告

公告名 概要 发布时间
KylinSec-SA-2024-4973 kernel security update 2025年2月28日

影响产品

产品 状态
KY3.5.2 kernel Fixed
V6 kernel Fixed
KY3.5.3 kernel Fixed