发布于3月6日3月6日 Members Debian: CVE-2022-48816: linux -- security update Severity 4 CVSS (AV:L/AC:M/Au:N/C:P/I:P/A:P) Published 07/30/2024 Created 07/31/2024 Added 07/30/2024 Modified 07/31/2024 Description In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex.Otherwise a sysfs read can trigger an oops. Commit 17f09d3f619a ("SUNRPC: Check if the xprt is connected before handling sysfs reads") appears to attempt to fix this problem, but it only narrows the race window. Solution(s) debian-upgrade-linux References https://attackerkb.com/topics/cve-2022-48816 CVE - 2022-48816
参与讨论
你可立刻发布并稍后注册。 如果你有帐户，立刻登录发布帖子。