Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize DRC hash table before registering shrinker shrinker_register() precedes the INIT_LIST_HEAD loop and the drc_hashsize store. On weakly-ordered architectures (arm64, ppc), a shrinker scan can observe drc_hashsize before the bucket list heads are initialized, causing a NULL deref in the DRC shrinker callback. Move bucket initialization and the drc_hashsize store before shrinker_register() so the hash table is fully initialized before it becomes visible to the shrinker.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 to < f060f43a67635dbb393bf5dcbfc3e8b9a44942cbaffected8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 to < b57bd8cb739cb3cf88bdb1a5903a42a707a5c282affected8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 to < 431c70ca5163c98c746f22f16cd58ca5aefec6dcaffected8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 to < b0c58934f5cc4f05b63ef6605dd10c1d0d489e88affected
Linux Linux
Default version status: affected
6.7affected0 to < 6.7unaffected6.12.109 to ≤ 6.12.*unaffected6.18.50 to ≤ 6.18.*unaffected7.2.4 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected