发布时间: 2024年11月8日
修改时间: 2024年11月15日
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated node that might be used later. If we then use that node for a new non-root node, it'll still have a pointer to the old root instead of being zeroed - fix this by zeroing it in the cmpxchg failure path.
NVD | openEuler | |
---|---|---|
Confidentiality | None | None |
Attack Vector | Local | Local |
CVSS评分 | 4.7 | 4.7 |
Attack Complexity | High | High |
Privileges Required | Low | Low |
Scope | Unchanged | Unchanged |
Integrity | None | None |
User Interaction | None | None |
Availability | High | High |
公告名 | 概要 | 发布时间 |
---|---|---|
KylinSec-SA-2024-4990 | kernel security update | 2025年7月19日 |
产品 | 包 | 状态 |
---|---|---|
KY3.5.2 | kernel | Fixed |
V6 | kernel | Fixed |
KY3.5.3 | kernel | Fixed |