[SRU][Lunar 0/2, Jammy 0/1] CVE-2023-46862

Bethany Jamison bethany.jamison at canonical.com
Mon Jan 22 18:24:08 UTC 2024


[Impact]

An issue was discovered in the Linux kernel through 6.5.9. During a 
race with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo 
NULL pointer dereference can occur.

[Fix]

Lunar: Clean cherry-pick.
Jammy: Manual backport of original fix commit. The structure of 
io_uring in Jammy is different from  upstream, so I found where the
chunk of code had been moved to in Jammy and directly applied the
changes.

[Test Case]

Compile and boot test.

[Regression Potential]

Issues could occur during SQ thread exit races.

Jens Axboe (2):
  io_uring/fdinfo: get rid of ref tryget
  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid

 io_uring/fdinfo.c | 36 ++++++++++++++++++------------------
 1 file changed, 18 insertions(+), 18 deletions(-)

-- 
2.34.1




More information about the kernel-team mailing list