Description
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posix_cpu_timer_create() takes a pid reference via get_pid() and stores it in timer.it.cpu.pid. If the subsequent posix_cpu_timer_set() call fails, the function returns immediately without calling posix_cpu_timer_del() to release the pid reference, causing a leak. Fix it by calling posix_cpu_timer_del() before the unlock-and-return on the error path, consistent with the other exit paths in the same function.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < afed3cdc1cca133f804fcf57ff228974f424b23aaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8a270b1258797f61b61da44f8bfd41a581b5c85baffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d605d00085adc3fddf67de01dc2a44aebf1a3fb5affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e5ffc638faf5dc7d9dc85c9a95e10bf97442e0c0affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < eb4cec29a78334d09bcfb41c0660cdd62ba05843affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 7776f9226e99eb49d97492b0b445027cfcb189daaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8f06363446c5d043c9a7c008b250040e9de98cf9affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 87bd2ad568e15b90d5f7d4bcd70342d05dad649caffected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.96 to ≤ 6.12.*unaffected6.18.39 to ≤ 6.18.*unaffected7.1.4 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/afed3cdc1cca133f804fcf57ff228974f424b23a ↗
- https://git.kernel.org/stable/c/8a270b1258797f61b61da44f8bfd41a581b5c85b ↗
- https://git.kernel.org/stable/c/d605d00085adc3fddf67de01dc2a44aebf1a3fb5 ↗
- https://git.kernel.org/stable/c/e5ffc638faf5dc7d9dc85c9a95e10bf97442e0c0 ↗
- https://git.kernel.org/stable/c/eb4cec29a78334d09bcfb41c0660cdd62ba05843 ↗
- https://git.kernel.org/stable/c/7776f9226e99eb49d97492b0b445027cfcb189da ↗
- https://git.kernel.org/stable/c/8f06363446c5d043c9a7c008b250040e9de98cf9 ↗
- https://git.kernel.org/stable/c/87bd2ad568e15b90d5f7d4bcd70342d05dad649c ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗