In the Linux kernel, the following vulnerability has been resolved:
io_uring: fail cancellation for EXITING tasks
WARNING: CPU: 1 PID: 20 at fs/io_uring.c:6269 io_try_cancel_userdata+0x3c5/0x640 fs/io_uring.c:6269 CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.16.0-rc1-syzkaller #0 Workqueue: events io_fallback_req_func RIP: 0010:io_try_cancel_userdata+0x3c5/0x640 fs/io_uring.c:6269 Call Trace: <TASK> io_req_task_link_timeout+0x6b/0x1e0 fs/io_uring.c:6886 io_fallback_req_func+0xf9/0x1ae fs/io_uring.c:1334 process_one_work+0x9b2/0x1690 kernel/workqueue.c:2298 worker_thread+0x658/0x11f0 kernel/workqueue.c:2445 kthread+0x405/0x4f0 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK>
We need original task's context to do cancellations, so if it's dying and the callback is executed in a fallback mode, fail the cancellation attempt.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-armUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-devel-azure | Aug 9, 2024 | May 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub