CVSS 7.8 · High EPSS 0,25%
Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut CISA ADP.
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work on cache_ctr error An unexpected WARN_ON from flush_work() may occur when cache creation fails, caused by destroying the uninitialized delayed_work waker in the error path of cache_create(). For example, the warning appears on the superblock checksum error. Reproduce steps: dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 65536 linear /dev/sdc 8192" dmsetup create corig --table "0 524288 linear /dev/sdc 262144" dd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 524288 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0" Kernel logs: (snip) WARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890 Fix by pulling out the cancel_delayed_work_sync() from the constructor's error path. This patch doesn't affect the use-after-free fix for concurrent dm_resume and dm_destroy (commit 6a459d8edbdb ("dm cache: Fix UAF in destroy()")) as cache_dtr is not changed.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 4.9.337 hingga sebelum 4.10 |
| linux | linux kernel | Versi 4.14.303 hingga sebelum 4.15 |
| linux | linux kernel | Versi 4.19.270 hingga sebelum 4.20 |
| linux | linux kernel | Versi 5.4.229 hingga sebelum 5.5 |
| linux | linux kernel | Versi 5.10.163 hingga sebelum 5.11 |
| linux | linux kernel | Versi 5.15.87 hingga sebelum 5.16 |
| linux | linux kernel | Versi 6.0.18 hingga sebelum 6.1 |
| linux | linux kernel | Versi 6.1.4 hingga sebelum 6.1.117 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.61 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.11.8 |
| linux | linux kernel | Versi 6.12 rc1 |
| linux | linux kernel | Versi 6.12 rc2 |
| linux | linux kernel | Versi 6.12 rc3 |
| linux | linux kernel | Versi 6.12 rc4 |
| linux | linux kernel | Versi 6.12 rc5 |
| linux | linux kernel | Versi 6.12 rc6 |