Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-50060

io_uring: check if we need to reschedule during overflow flush

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: check if we need to reschedule during overflow flush In terms of normal application usage, this list will always be empty. And if an application does overflow a bit, it'll have a few entries. However, nothing obviously prevents syzbot from running a test case that generates a ton of overflow entries, and then flushing them can take quite a while. Check for needing to reschedule while flushing, and drop our locks and do so if necessary. There's no state to maintain here as overflows always prune from head-of-list, hence it's fine to drop and reacquire the locks at the end of the loop.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < a2493904e95ce94bbec819d8f7f03b99976eb25caffected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < f4ce3b5d26ce149e77e6b8e8f2058aa80e5b034eaffected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < c2eadeafce2d385b3f6d26a7f31fee5aba2bbbb0affected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < eac2ca2d682f94f46b1973bdf5e77d85d77b8e53affected

Linux Linux

Default version status: affected

  • 5.1affected
  • 0 to < 5.1unaffected
  • 6.1.113 to ≤ 6.1.*unaffected
  • 6.6.57 to ≤ 6.6.*unaffected
  • 6.11.4 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References