Description
In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data races in proc_douintvec_minmax(). A sysctl variable is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. This patch changes proc_douintvec_minmax() to use READ_ONCE() and WRITE_ONCE() internally to fix data-races on the sysctl side. For now, proc_douintvec_minmax() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
61d9b56a89208d8cccd0b4cfec7e6959717e16e3 to < e3a2144b3b6bf9ecafd91087c8b8b48171ec19dfaffected61d9b56a89208d8cccd0b4cfec7e6959717e16e3 to < 40e0477a7371d101c55b69d9c32a7a1ed82ab5eaaffected61d9b56a89208d8cccd0b4cfec7e6959717e16e3 to < b60eddf98b9716651069dfda296c91311a7a6293affected61d9b56a89208d8cccd0b4cfec7e6959717e16e3 to < 2d3b559df3ed39258737789aae2ae7973d205bc1affected
Linux Linux
Default version status: affected
4.13affected0 to < 4.13unaffected5.10.132 to ≤ 5.10.*unaffected5.15.56 to ≤ 5.15.*unaffected5.18.13 to ≤ 5.18.*unaffected5.19 to ≤ *unaffected