CVSS 7.0 · High EPSS 0,14%
Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 7.0 (High) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_secs of the struct gfs2_tune are accessed without holding the lock gt_spin in gfs2_show_options(): val = sdp->sd_tune.gt_logd_secs; if (val != 30) seq_printf(s, ",commit=%d", val); And thus can cause data races when gfs2_show_options() and other functions such as gfs2_reconfigure() are concurrently executed: spin_lock(>->gt_spin); gt->gt_logd_secs = newargs->ar_commit; To fix these possible data races, the lock sdp->sd_tune.gt_spin is acquired before accessing the fields of gfs2_tune and released after these accesses. Further changes by Andreas: - Don't hold the spin lock over the seq_printf operations.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 2.6.31 hingga sebelum 4.14.324 |
| linux | linux kernel | Versi 4.15 hingga sebelum 4.19.293 |
| linux | linux kernel | Versi 4.20 hingga sebelum 5.4.255 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.192 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.128 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.47 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.4.12 |