In the Linux kernel, the following vulnerability has been resolved:
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
syzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at cpuset_attach() [1], for commit 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") missed that cpuset_attach() is also called from cgroup_attach_task_all(). Add cpus_read_lock() like what cgroup_procs_write_start() does.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-symsUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-develUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall | Aug 9, 2024 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub