In the Linux kernel, the following vulnerability has been resolved:
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
syzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at cpuset_attach() [1], for commit 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") missed that cpuset_attach() is also called from cgroup_attach_task_all(). Add cpus_read_lock() like what cgroup_procs_write_start() does.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade kernel-rt | Aug 9, 2024 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub