In the Linux kernel, the following vulnerability has been resolved:
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
syzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at cpuset_attach() [1], for commit 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") missed that cpuset_attach() is also called from cgroup_attach_task_all(). Add cpus_read_lock() like what cgroup_procs_write_start() does.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-5.15.73-48.135Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-develUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfo | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-macrosUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-apmUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade dlm-kmp-default | Aug 9, 2024 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub