Show plain JSON{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-48671", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-25T13:44:28.321Z", "datePublished": "2024-05-03T14:50:23.558Z", "dateUpdated": "2024-12-19T08:05:27.795Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:05:27.795Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()\n\nsyzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at\ncpuset_attach() [1], for commit 4f7e7236435ca0ab (\"cgroup: Fix\nthreadgroup_rwsem <-> cpus_read_lock() deadlock\") missed that\ncpuset_attach() is also called from cgroup_attach_task_all().\nAdd cpus_read_lock() like what cgroup_procs_write_start() does."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/cgroup/cgroup-v1.c"], "versions": [{"version": "e446300968c6bd25d9cd6c33b9600780a39b3975", "lessThan": "321488cfac7d0eb6d97de467015ff754f85813ff", "status": "affected", "versionType": "git"}, {"version": "59c6902a96b4439e07c25ef86a4593bea5481c3b", "lessThan": "07191f984842d50020789ff14c75da436a7f46a9", "status": "affected", "versionType": "git"}, {"version": "dee1e2b18cf5426eed985512ccc6636ec69dbdd6", "lessThan": "9f267393b036f1470fb12fb892d59e7ff8aeb58d", "status": "affected", "versionType": "git"}, {"version": "3bf4bf54069f9b62a54988e5d085023c17a66c90", "lessThan": "5db17805b6ba4c34dab303f49aea3562fc25af75", "status": "affected", "versionType": "git"}, {"version": "c0deb027c99c099aa6b831e326bfba802b25e774", "lessThan": "99bc25748e394d17f9e8b10cc7f273b8e64c1c7e", "status": "affected", "versionType": "git"}, {"version": "4f7e7236435ca0abe005c674ebd6892c6e83aeb3", "lessThan": "43626dade36fa74d3329046f4ae2d7fdefe401c6", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/cgroup/cgroup-v1.c"], "versions": [{"version": "5.4.213", "lessThan": "5.4.215", "status": "affected", "versionType": "semver"}, {"version": "5.10.143", "lessThan": "5.10.145", "status": "affected", "versionType": "semver"}, {"version": "5.15.68", "lessThan": "5.15.70", "status": "affected", "versionType": "semver"}, {"version": "5.19.9", "lessThan": "5.19.11", "status": "affected", "versionType": "semver"}]}], "references": [{"url": "https://git.kernel.org/stable/c/321488cfac7d0eb6d97de467015ff754f85813ff"}, {"url": "https://git.kernel.org/stable/c/07191f984842d50020789ff14c75da436a7f46a9"}, {"url": "https://git.kernel.org/stable/c/9f267393b036f1470fb12fb892d59e7ff8aeb58d"}, {"url": "https://git.kernel.org/stable/c/5db17805b6ba4c34dab303f49aea3562fc25af75"}, {"url": "https://git.kernel.org/stable/c/99bc25748e394d17f9e8b10cc7f273b8e64c1c7e"}, {"url": "https://git.kernel.org/stable/c/43626dade36fa74d3329046f4ae2d7fdefe401c6"}], "title": "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-667", "lang": "en", "description": "CWE-667 Improper Locking"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-05-06T15:12:14.079254Z", "id": "CVE-2022-48671", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-20T14:42:25.347Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.720Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/321488cfac7d0eb6d97de467015ff754f85813ff", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/07191f984842d50020789ff14c75da436a7f46a9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9f267393b036f1470fb12fb892d59e7ff8aeb58d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5db17805b6ba4c34dab303f49aea3562fc25af75", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/99bc25748e394d17f9e8b10cc7f273b8e64c1c7e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/43626dade36fa74d3329046f4ae2d7fdefe401c6", "tags": ["x_transferred"]}]}]}}