REDHAT-BUG-710338: Medium severity red hat linux vulnerability
Andrea Righi reported a case where an exiting task can race against ksmd.
ksmscan.mmslot == the only registered mm CPU 1 (bug program) CPU 2 (ksmd) listempty() is false lock ksmscan.mmslot listdel unlock slot == &ksmmmhead (but list is now empty)
Close this race by revalidating that the new slot is not simply the list head again.
Reproducer: http://www.spinics.net/lists/linux-mm/msg20233.html Proposed patch: http://www.spinics.net/lists/linux-mm/msg20301.html
Acknowledgements:
Red Hat would like to thank Andrea Righi for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-710338?
The severity of REDHAT-BUG-710338 is considered to be moderate due to the potential race condition.
How do I fix REDHAT-BUG-710338?
To fix REDHAT-BUG-710338, apply the latest patches provided by Red Hat for your Linux distribution.
Which versions of Red Hat Linux are affected by REDHAT-BUG-710338?
REDHAT-BUG-710338 affects multiple versions of Red Hat Linux, so ensure your version is updated as indicated in the provided advisories.
Is a workaround available for REDHAT-BUG-710338?
No specific workaround is recommended for REDHAT-BUG-710338 beyond updating the system software.
What type of vulnerability is REDHAT-BUG-710338?
REDHAT-BUG-710338 is a race condition vulnerability that occurs with the ksmd process.