Description
In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data races in proc_douintvec(). A sysctl variable is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. This patch changes proc_douintvec() to use READ_ONCE() and WRITE_ONCE() internally to fix data-races on the sysctl side. For now, proc_douintvec() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
e7d316a02f683864a12389f8808570e37fb90aa3 to < d5d54714e329f646bd7af4994fc427d88ee68936affectede7d316a02f683864a12389f8808570e37fb90aa3 to < d335db59f7fb3353f56e52371f1ee796ae9c8f09affectede7d316a02f683864a12389f8808570e37fb90aa3 to < 630c76850d554d7140232e71b5d1663e88cffb54affectede7d316a02f683864a12389f8808570e37fb90aa3 to < 4762b532ec9539755aab61445d5da6e1926ccb99affected70cd763eb1574cac07138be91f474a661e02d694affectedf4cea51e9a3d536e2ca2b74a958f7c0b4ea733c3affected4.4.24 to < 4.5affected4.7.7 to < 4.8affected
Linux Linux
Default version status: affected
4.8affected0 to < 4.8unaffected5.10.132 to ≤ 5.10.*unaffected5.15.56 to ≤ 5.15.*unaffected5.18.13 to ≤ 5.18.*unaffected5.19 to ≤ *unaffected