In the Linux kernel, the following vulnerability has been resolved:
tracing: Restructure trace_clock_global() to never block
It was reported that a fix to the ring buffer recursion detection would cause a hung machine when performing suspend / resume testing. The following backtrace was extracted from debugging that case:
Call Trace: trace_clock_global+0x91/0xa0 __rb_reserve_next+0x237/0x460 ring_buffer_lock_reserve+0x12a/0x3f0 trace_buffer_lock_reserve+0x10/0x50 __trace_graph_return+0x1f/0x80 trace_graph_return+0xb7/0xf0 ? trace_clock_global+0x91/0xa0 ftrace_return_to_handler+0x8b/0xf0 ? pv_hash+0xa0/0xa0 return_to_handler+0x15/0x30 ? ftrace_graph_caller+0xa0/0xa0 ? trace_clock_global+0x91/0xa0 ? __rb_reserve_next+0x237/0x460 ? ring_buffer_lock_reserve+0x12a/0x3f0 ? trace_event_buffer_lock_reserve+0x3c/0x120 ? trace_event_buffer_reserve+0x6b/0xc0 ? trace_event_raw_event_device_pm_callback_start+0x125/0x2d0 ? dpm_run_callback+0x3b/0xc0 ? pm_ops_is_empty+0x50/0x50 ? platform_get_irq_byname_optional+0x90/0x90 ? trace_device_pm_callback_start+0x82/0xd0 ? dpm_run_callback+0x49/0xc0
With the following RIP:
RIP: 0010:native_queued_spin_lock_slowpath+0x69/0x200
Since the fix to the recursion detection would allow a single recursion to happen while tracing, this lead to the trace_clock_global() taking a spin lock and then trying to take it again:
ring_buffer_lock_reserve() { trace_clock_global() { arch_spin_lock() { queued_spin_lock_slowpath() { /* lock taken */ (something else gets traced by function graph tracer) ring_buffer_lock_reserve() { trace_clock_global() { arch_spin_lock() { queued_spin_lock_slowpath() { /* DEAD LOCK! */
Tracing should *never* block, as it can lead to strange lockups like the above.
Restructure the trace_clock_global() code to instead of simply taking a lock to update the recorded "prev_time" simply use it, as two events happening on two different CPUs that calls this at the same time, really doesn't matter which one goes first. Use a trylock to grab the lock for updating the prev_time, and if it fails, simply try again the next time. If it failed to be taken, that means something else is already updating it.
Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=212761
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump | Aug 12, 2024 | Feb 27, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade python-perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headers | Apr 25, 2024 | Feb 27, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Jul 23, 2024 | Feb 27, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Feb 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Feb 27, 2024 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-rtUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headers | Aug 22, 2024 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-devel-azure | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-254-genericUpgrade linux-image-4.4.0-1131-awsUpgrade linux-image-4.4.0-1169-awsUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-254-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-1132-kvm | May 20, 2024 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub