Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sched_fork() access an invalid sched_task_group") fixed a fork race vs cgroup, it opened up a race vs syscalls by not placing the task on the runqueue before it gets exposed through the pidhash. Commit 13765de8148f ("sched/fair: Fix fault in reweight_entity") is trying to fix a single instance of this, instead fix the whole class of issues, effectively reverting this commit.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 3869eecf050416a1d19bac60926f6b5d64b0aa58 before 3411613611a5cddf7e80908010dc87cb527dd13b; affected 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a before c65cfd89cef669d90c59f3bf150af6458137a04f; affected 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a before b1e8206582f9d680cff7d04828708c8b6ab32957; affected c85c6fadbef0a3eab41540ea628fa8fe8928c820; affected 25d40b828fb855ee62e1039c65a666c9afd60786; affected 5.15.3 before 5.15.27; affected 5.10.80 before 5.11; affected 5.14.19 before 5.15 |
| Linux / Linux | affected 5.16; unaffected 0 before 5.16; unaffected 5.15.27 through 5.15.*; unaffected 5.16.13 through 5.16.*; unaffected 5.17 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/3411613611a5cddf7e80908010dc87cb527dd13b
- https://git.kernel.org/stable/c/c65cfd89cef669d90c59f3bf150af6458137a04f
- https://git.kernel.org/stable/c/b1e8206582f9d680cff7d04828708c8b6ab32957
ADP enrichment
No English description supplied.
No references supplied.