Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-46713

perf/aux: Fix AUX buffer serialization

Description

In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in the lock order comment the perf_event::mmap_mutex order was already wrong, that is, it nesting under mmap_lock is not new with this patch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 45bfb2e50471abbbfd83d40d28c986078b0d24ff to < 7882923f1cb88dc1a17f2bf0c81b1fc80d44db82affected
  • 45bfb2e50471abbbfd83d40d28c986078b0d24ff to < 52d13d224fdf1299c8b642807fa1ea14d693f5ffaffected
  • 45bfb2e50471abbbfd83d40d28c986078b0d24ff to < 9dc7ad2b67772cfb94ceb3b0c9c4023c2463215daffected
  • 45bfb2e50471abbbfd83d40d28c986078b0d24ff to < c4b69bee3f4ef76809288fe6827bc14d4ae788efaffected
  • 45bfb2e50471abbbfd83d40d28c986078b0d24ff to < b9b6882e243b653d379abbeaa64a500182aba370affected
  • 45bfb2e50471abbbfd83d40d28c986078b0d24ff to < 2ab9d830262c132ab5db2f571003d80850d56b2aaffected

Linux Linux

Default version status: affected

  • 4.1affected
  • 0 to < 4.1unaffected
  • 5.10.226 to ≤ 5.10.*unaffected
  • 5.15.167 to ≤ 5.15.*unaffected
  • 6.1.110 to ≤ 6.1.*unaffected
  • 6.6.51 to ≤ 6.6.*unaffected
  • 6.10.10 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References