Description
In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when polling Add missing lock protection in poll routine when iterating xarray, otherwise: Even with RCU read lock held, only the slot of the radix tree is ensured to be pinned there, while the data structure (e.g. struct cachefiles_req) stored in the slot has no such guarantee. The poll routine will iterate the radix tree and dereference cachefiles_req accordingly. Thus RCU read lock is not adequate in this case and spinlock is needed here.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0e19a18f998dcabe8be590e0b39660a1f230209b to < 97cfd5e20ddc2e33e16ce369626ce76c9a475fd7affected18943864342705fa18dd4e6b8d608491fec81f6e to < 6bb6bd3dd6f382dfd36220d4b210a0c77c066651affectedb817e22b2e91257ace32a6768c3c003faeaa1c5c to < 8eadcab7f3dd809edbe5ae20533ff843dfea3a07affectedb817e22b2e91257ace32a6768c3c003faeaa1c5c to < cf5bb09e742a9cf6349127e868329a8f69b7a014affected
Linux Linux
Default version status: affected
6.8affected0 to < 6.8unaffected6.9.10 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/97cfd5e20ddc2e33e16ce369626ce76c9a475fd7 ↗
- https://git.kernel.org/stable/c/6bb6bd3dd6f382dfd36220d4b210a0c77c066651 ↗
- https://git.kernel.org/stable/c/8eadcab7f3dd809edbe5ae20533ff843dfea3a07 ↗
- https://git.kernel.org/stable/c/cf5bb09e742a9cf6349127e868329a8f69b7a014 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗