Description
In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data-races in proc_dou8vec_minmax(). A sysctl variable is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. This patch changes proc_dou8vec_minmax() to use READ_ONCE() and WRITE_ONCE() internally to fix data-races on the sysctl side. For now, proc_dou8vec_minmax() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
389dab6142d742f91010f38de0f1f2f440b97e1b to < f177b382c33900d0e5a9766493c11a1074076f78affectedcb9444130662c6c13022579c861098f212db2562 to < e58b02e445463065b4078bf621561da75197853faffectedcb9444130662c6c13022579c861098f212db2562 to < 5f776daef0b5354615ec4b4234cd9539ca05f273affectedcb9444130662c6c13022579c861098f212db2562 to < 7dee5d7747a69aa2be41f04c6a7ecfe3ac8cdf18affected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.56 to ≤ 5.15.*unaffected5.18.13 to ≤ 5.18.*unaffected5.19 to ≤ *unaffected