In the Linux kernel, the following vulnerability has been resolved:
io_uring: fail cancellation for EXITING tasks
WARNING: CPU: 1 PID: 20 at fs/io_uring.c:6269 io_try_cancel_userdata+0x3c5/0x640 fs/io_uring.c:6269 CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.16.0-rc1-syzkaller #0 Workqueue: events io_fallback_req_func RIP: 0010:io_try_cancel_userdata+0x3c5/0x640 fs/io_uring.c:6269 Call Trace: <TASK> io_req_task_link_timeout+0x6b/0x1e0 fs/io_uring.c:6886 io_fallback_req_func+0xf9/0x1ae fs/io_uring.c:1334 process_one_work+0x9b2/0x1690 kernel/workqueue.c:2298 worker_thread+0x658/0x11f0 kernel/workqueue.c:2445 kthread+0x405/0x4f0 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK>
We need original task's context to do cancellations, so if it's dying and the callback is executed in a fallback mode, fail the cancellation attempt.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-armUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade kselftests-kmp-azure | Aug 9, 2024 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub