Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-26686

fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time and the process has NR_THREADS, it will spin with irqs disabled O(NR_CPUS * NR_THREADS) time. Change do_task_stat() to use sig->stats_lock to gather the statistics outside of ->siglock protected section, in the likely case this code will run lockless.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 4fe85bdaabd63f8f8579b24a10ed597c9c482164affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 0c35d1914353799c54fa1843fe7dea6fcbcdbac5affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < cf4b8c39b9a0bd81c47afc7ef62914a62dd5ec4daffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3820b0fac7732a653bcc6f6ac20c1d72e697f8f6affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 27978243f165b44e342f28f449b91327944ea071affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 7601df8031fd67310af891897ef6cc0df4209305affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.10.237 to ≤ 5.10.*unaffected
  • 5.15.181 to ≤ 5.15.*unaffected
  • 6.1.82 to ≤ 6.1.*unaffected
  • 6.6.64 to ≤ 6.6.*unaffected
  • 6.7.6 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References