ghsa-fj82-rhmq-mr6v
Vulnerability from github
Published
2024-05-19 09:34
Modified
2024-05-19 09:34
Details
In the Linux kernel, the following vulnerability has been resolved:
io_uring/kbuf: hold io_buffer_list reference over mmap
If we look up the kbuf, ensure that it doesn't get unregistered until after we're done with it. Since we're inside mmap, we cannot safely use the io_uring lock. Rely on the fact that we can lookup the buffer list under RCU now and grab a reference to it, preventing it from being unregistered until we're done with it. The lookup returns the io_buffer_list directly with it referenced.
{
"affected": [],
"aliases": [
"CVE-2024-35880"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-19T09:15:09Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/kbuf: hold io_buffer_list reference over mmap\n\nIf we look up the kbuf, ensure that it doesn\u0027t get unregistered until\nafter we\u0027re done with it. Since we\u0027re inside mmap, we cannot safely use\nthe io_uring lock. Rely on the fact that we can lookup the buffer list\nunder RCU now and grab a reference to it, preventing it from being\nunregistered until we\u0027re done with it. The lookup returns the\nio_buffer_list directly with it referenced.",
"id": "GHSA-fj82-rhmq-mr6v",
"modified": "2024-05-19T09:34:46Z",
"published": "2024-05-19T09:34:46Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35880"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/561e4f9451d65fc2f7eef564e0064373e3019793"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/5fd8e2359498043e0b5329a05f02d10a9eb91eb9"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/65938e81df2197203bda4b9a0c477e7987218d66"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading...