In the Linux kernel, the following vulnerability has been resolved:
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
syzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at cpuset_attach() [1], for commit 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") missed that cpuset_attach() is also called from cgroup_attach_task_all(). Add cpus_read_lock() like what cgroup_procs_write_start() does.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.147-133.644 | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jul 17, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kernel-docsUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-base | Aug 9, 2024 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub