摘要:
In the Linux kernel, the following vulnerability has been resolved:
cachestat: do not flush stats in recency check
syzbot detects that cachestat() is flushing stats, which can sleep, in its
RCU read section (see [1]). This is done in the workingset_test_recent()
step (which checks if the folio's eviction is recent).
Move the stat flushing step to before the RCU read section of cachestat,
and skip stat flushing during the recency check.
[1]: https://lore.kernel.org/cgroups/000000000000f71227061bdf97e0@google.com/
安全等级: Low
公告ID: KylinSec-SA-2024-3464
发布日期: 2024年8月28日
关联CVE: CVE-2024-41033
In the Linux kernel, the following vulnerability has been resolved:
cachestat: do not flush stats in recency check
syzbot detects that cachestat() is flushing stats, which can sleep, in its
RCU read section (see [1]). This is done in the workingset_test_recent()
step (which checks if the folio's eviction is recent).
Move the stat flushing step to before the RCU read section of cachestat,
and skip stat flushing during the recency check.
[1]: https://lore.kernel.org/cgroups/000000000000f71227061bdf97e0@google.com/
cve名称 | 产品 | 组件 | 是否受影响 |
---|---|---|---|
CVE-2024-41033 | KY3.4-5 | kernel | Unaffected |
CVE-2024-41033 | KY3.5.3 | kernel | Unaffected |
CVE-2024-41033 | V6 | kernel | Unaffected |