In the Linux kernel, the following vulnerability has been resolved:
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
syzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at cpuset_attach() [1], for commit 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") missed that cpuset_attach() is also called from cgroup_attach_task_all(). Add cpus_read_lock() like what cgroup_procs_write_start() does.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.10.147-133.644Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdump | Aug 9, 2024 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub