CVSS 4.7 · Medium EPSS 0,12%
Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, debian linux. Skor CVSS 3.1 4.7 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_start_io() calls either gs_start_rx() or gs_start_tx(), as those functions briefly drop the port_lock for usb_ep_queue(). This allows gs_close() and gserial_disconnect() to clear port.tty and port_usb, respectively. Use the null-safe TTY Port helper function to wake up TTY. Example CPU1: CPU2: gserial_connect() // lock gs_close() // await lock gs_start_rx() // unlock usb_ep_queue() gs_close() // lock, reset port.tty and unlock gs_start_rx() // lock tty_wakeup() // NPE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 3.5 hingga sebelum 5.4.296 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.240 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.189 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.146 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.99 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.39 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.15.7 |
| linux | linux kernel | Versi 6.16 rc1 |
| linux | linux kernel | Versi 6.16 rc2 |
| linux | linux kernel | Versi 6.16 rc3 |
| linux | linux kernel | Versi 6.16 rc4 |
| debian | debian linux | Versi 11.0 |