CVSS 4.7 · Medium EPSS 0,15%
Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, debian linux. Skor CVSS 3.1 4.7 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothing prevents a call to nfs_inode_remove_request() from succeeding until we actually lock the page group. The reason is that whoever called nfs_inode_remove_request() doesn't necessarily have a lock on the page group head. So in order to avoid races, let's take the page group lock earlier in nfs_lock_and_join_requests(), and hold it across the removal of the request in nfs_inode_remove_request().
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 4.14 hingga sebelum 5.10.242 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.191 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.150 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.104 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.44 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.16.4 |
| linux | linux kernel | Versi 6.17 rc1 |
| linux | linux kernel | Versi 6.17 rc2 |
| debian | debian linux | Versi 11.0 |