Description
In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0eb69890e86775d178452880ea0d24384c5ccedf to < 552475d0b6cece73a52c0fa5faa0ce45e99df74baffected75cba72ddb788a5b9c7ed2139fbb84383df029eb to < 8ee8ccfd60bf17cbdab91069d324b5302f4f3a30affectedae4747dab2eab95a68bb2f6c7e904bff0424e1b1 to < c9e594194795c86ca753ad6ed64c2762e9309d0daffectedc4c54fce9ec54a59a4ca035af13c2823c76684cc to < d6f0d586808689963e58fd739bed626ff5013b24affectedfed93fb62e05c38152b0fc1dc9609639e63eed76 to < c0a0ded3bb7fd45f720faa48449a930153257d3aaffectedfed93fb62e05c38152b0fc1dc9609639e63eed76 to < e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2affectedfed93fb62e05c38152b0fc1dc9609639e63eed76 to < 49c57c6c108931a914ed94e3c0ddb974008260a3affectedfed93fb62e05c38152b0fc1dc9609639e63eed76 to < b505047ffc8057555900d2d3a005d033e6967382affected96be18c8fff9d57e29621386e2fa17268383ea27affected830a4f073f7edd2cc4f30ba95bdc3495d97c2550affected8862c0d2e47ba1733d9687fe0ff4e02d6e391255affected5.10.209 to < 5.10.251affected5.15.148 to < 5.15.201affected6.1.75 to < 6.1.164affected6.6.14 to < 6.6.125affected4.19.306 to < 4.20affected5.4.268 to < 5.5affected6.7.2 to < 6.8affected
Linux Linux
Default version status: affected
6.8affected0 to < 6.8unaffected5.10.251 to ≤ 5.10.*unaffected5.15.201 to ≤ 5.15.*unaffected6.1.164 to ≤ 6.1.*unaffected6.6.125 to ≤ 6.6.*unaffected6.12.72 to ≤ 6.12.*unaffected6.18.11 to ≤ 6.18.*unaffected6.19.1 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b ↗
- https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30 ↗
- https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d ↗
- https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24 ↗
- https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a ↗
- https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2 ↗
- https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3 ↗
- https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html ↗