摘要:
In the Linux kernel, the following vulnerability has been resolved:
io_uring: fix ltout double free on completion race
Always remove linked timeout on io_link_timeout_fn() from the master
request link list, otherwise we may get use-after-free when first
io_link_timeout_fn() puts linked timeout in the fail path, and then
will be found and put on master's free.
安全等级: Low
公告ID: KylinSec-SA-2024-4595
发布日期: 2024年5月11日
关联CVE: CVE-2021-47123
In the Linux kernel, the following vulnerability has been resolved:
io_uring: fix ltout double free on completion race
Always remove linked timeout on io_link_timeout_fn() from the master
request link list, otherwise we may get use-after-free when first
io_link_timeout_fn() puts linked timeout in the fail path, and then
will be found and put on master's free.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2021-47123 | KY3.4-5A | kernel | Unaffected |
| CVE-2021-47123 | KY3.5.1 | kernel | Unaffected |
| CVE-2021-47123 | V6 | kernel | Unaffected |
