dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.10, 4.19.316, 5.4.278, 5.10.219, 5.15.161, and 3 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from sync_print_obj() Since commit a6aa8fca4d79 ("dma-buf/sw-sync: Reduce irqsave/irqrestore from known context") by error replaced spin_unlock_irqrestore() with spin_unlock_irq() for both sync_debugfs_show() and sync_print_obj() despite sync_print_obj() is called from sync_debugfs_show(), lockdep complains inconsistent lock state warning. Use plain spin_{lock,unlock}() for sync_print_obj(), for sync_debugfs_show() is already using spin_{lock,unlock}_irq().
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From a6aa8fca4d792c72947e341d7842d2f700534335 · fixed in 1ff116f68560a25656933d5a18e7619cb6773d8a; From a6aa8fca4d792c72947e341d7842d2f700534335 · fixed in 165b25e3ee9333f7b04f8db43895beacb51582ed; From a6aa8fca4d792c72947e341d7842d2f700534335 · fixed in ae6fc4e6a3322f6d1c8ff59150d8469487a73dd8; From a6aa8fca4d792c72947e341d7842d2f700534335 · fixed in 9d75fab2c14a25553a1664586ed122c316bd1878; From a6aa8fca4d792c72947e341d7842d2f700534335 · fixed in 242b30466879e6defa521573c27e12018276c33a; From a6aa8fca4d792c72947e341d7842d2f700534335 · fixed in a4ee78244445ab73af22bfc5a5fc543963b25aef; From a6aa8fca4d792c72947e341d7842d2f700534335 · fixed in 8a283cdfc8beeb14024387a925247b563d614e1e; From a6aa8fca4d792c72947e341d7842d2f700534335 · fixed in b794918961516f667b0c745aebdfebbb8a98df39; From 4.9.68 · fixed in 4.10
- Linux Linux
4.14
- KernelLinux
From 4.14.0 · fixed in 4.19.316; From 4.20.0 · fixed in 5.4.278; From 5.5.0 · fixed in 5.10.219; From 5.11.0 · fixed in 5.15.161; From 5.16.0 · fixed in 6.1.93; From 6.2.0 · fixed in 6.6.33; From 6.7.0 · fixed in 6.9.4
References 8
git.kernel.org
- stable/c/1ff116f68560a25656933d5a18e7619cb6773d8a
- stable/c/165b25e3ee9333f7b04f8db43895beacb51582ed
- stable/c/ae6fc4e6a3322f6d1c8ff59150d8469487a73dd8
- stable/c/9d75fab2c14a25553a1664586ed122c316bd1878
- stable/c/242b30466879e6defa521573c27e12018276c33a
- stable/c/a4ee78244445ab73af22bfc5a5fc543963b25aef
- stable/c/8a283cdfc8beeb14024387a925247b563d614e1e
- stable/c/b794918961516f667b0c745aebdfebbb8a98df39