CVE-2022-48671 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() syzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at cpuset_attach() [1], for commit 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") missed that cpuset_attach() is also called from cgroup_attach_task_all(). Add cpus_read_lock() like what cgroup_procs_write_start() does.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Linux	Linux Kernel

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

No data.

References

Link	Providers
https://git.kernel.org/stable/c/07191f984842d50020789ff14c75da436a7f46a9
https://git.kernel.org/stable/c/321488cfac7d0eb6d97de467015ff754f85813ff
https://git.kernel.org/stable/c/43626dade36fa74d3329046f4ae2d7fdefe401c6
https://git.kernel.org/stable/c/5db17805b6ba4c34dab303f49aea3562fc25af75
https://git.kernel.org/stable/c/99bc25748e394d17f9e8b10cc7f273b8e64c1c7e
https://git.kernel.org/stable/c/9f267393b036f1470fb12fb892d59e7ff8aeb58d
https://nvd.nist.gov/vuln/detail/CVE-2022-48671
https://www.cve.org/CVERecord?id=CVE-2022-48671

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-03T14:50:23.558Z

Updated: 2024-08-03T15:17:55.720Z

Reserved: 2024-02-25T13:44:28.321Z

Link: CVE-2022-48671

Vulnrichment

Updated: 2024-05-23T19:01:24.089Z

NVD

Status : Analyzed

Published: 2024-05-03T15:15:07.433

Modified: 2024-05-23T20:26:32.357

Link: CVE-2022-48671

Redhat

Severity : Moderate

Publid Date: 2024-05-03T00:00:00Z

Links: CVE-2022-48671 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-48671", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-25T13:44:28.321Z", "datePublished": "2024-05-03T14:50:23.558Z", "dateUpdated": "2024-08-03T15:17:55.720Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:11:14.683Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()\n\nsyzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at\ncpuset_attach() [1], for commit 4f7e7236435ca0ab (\"cgroup: Fix\nthreadgroup_rwsem <-> cpus_read_lock() deadlock\") missed that\ncpuset_attach() is also called from cgroup_attach_task_all().\nAdd cpus_read_lock() like what cgroup_procs_write_start() does."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/cgroup/cgroup-v1.c"], "versions": [{"version": "e446300968c6", "lessThan": "321488cfac7d", "status": "affected", "versionType": "git"}, {"version": "59c6902a96b4", "lessThan": "07191f984842", "status": "affected", "versionType": "git"}, {"version": "dee1e2b18cf5", "lessThan": "9f267393b036", "status": "affected", "versionType": "git"}, {"version": "3bf4bf54069f", "lessThan": "5db17805b6ba", "status": "affected", "versionType": "git"}, {"version": "c0deb027c99c", "lessThan": "99bc25748e39", "status": "affected", "versionType": "git"}, {"version": "4f7e7236435c", "lessThan": "43626dade36f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/cgroup/cgroup-v1.c"], "versions": [{"version": "5.4.213", "lessThan": "5.4.215", "status": "affected", "versionType": "custom"}, {"version": "5.10.143", "lessThan": "5.10.145", "status": "affected", "versionType": "custom"}, {"version": "5.15.68", "lessThan": "5.15.70", "status": "affected", "versionType": "custom"}, {"version": "5.19.9", "lessThan": "5.19.11", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://git.kernel.org/stable/c/321488cfac7d0eb6d97de467015ff754f85813ff"}, {"url": "https://git.kernel.org/stable/c/07191f984842d50020789ff14c75da436a7f46a9"}, {"url": "https://git.kernel.org/stable/c/9f267393b036f1470fb12fb892d59e7ff8aeb58d"}, {"url": "https://git.kernel.org/stable/c/5db17805b6ba4c34dab303f49aea3562fc25af75"}, {"url": "https://git.kernel.org/stable/c/99bc25748e394d17f9e8b10cc7f273b8e64c1c7e"}, {"url": "https://git.kernel.org/stable/c/43626dade36fa74d3329046f4ae2d7fdefe401c6"}], "title": "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48671", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-06T15:12:14.079254Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:16:44.258Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.720Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/321488cfac7d0eb6d97de467015ff754f85813ff", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/07191f984842d50020789ff14c75da436a7f46a9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9f267393b036f1470fb12fb892d59e7ff8aeb58d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5db17805b6ba4c34dab303f49aea3562fc25af75", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/99bc25748e394d17f9e8b10cc7f273b8e64c1c7e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/43626dade36fa74d3329046f4ae2d7fdefe401c6", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-48671", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-25T13:44:28.321Z", "datePublished": "2024-05-03T14:50:23.558Z", "dateUpdated": "2024-06-04T17:16:44.258Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:11:14.683Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()\n\nsyzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at\ncpuset_attach() [1], for commit 4f7e7236435ca0ab (\"cgroup: Fix\nthreadgroup_rwsem <-> cpus_read_lock() deadlock\") missed that\ncpuset_attach() is also called from cgroup_attach_task_all().\nAdd cpus_read_lock() like what cgroup_procs_write_start() does."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/cgroup/cgroup-v1.c"], "versions": [{"version": "e446300968c6", "lessThan": "321488cfac7d", "status": "affected", "versionType": "git"}, {"version": "59c6902a96b4", "lessThan": "07191f984842", "status": "affected", "versionType": "git"}, {"version": "dee1e2b18cf5", "lessThan": "9f267393b036", "status": "affected", "versionType": "git"}, {"version": "3bf4bf54069f", "lessThan": "5db17805b6ba", "status": "affected", "versionType": "git"}, {"version": "c0deb027c99c", "lessThan": "99bc25748e39", "status": "affected", "versionType": "git"}, {"version": "4f7e7236435c", "lessThan": "43626dade36f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/cgroup/cgroup-v1.c"], "versions": [{"version": "5.4.213", "lessThan": "5.4.215", "status": "affected", "versionType": "custom"}, {"version": "5.10.143", "lessThan": "5.10.145", "status": "affected", "versionType": "custom"}, {"version": "5.15.68", "lessThan": "5.15.70", "status": "affected", "versionType": "custom"}, {"version": "5.19.9", "lessThan": "5.19.11", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://git.kernel.org/stable/c/321488cfac7d0eb6d97de467015ff754f85813ff"}, {"url": "https://git.kernel.org/stable/c/07191f984842d50020789ff14c75da436a7f46a9"}, {"url": "https://git.kernel.org/stable/c/9f267393b036f1470fb12fb892d59e7ff8aeb58d"}, {"url": "https://git.kernel.org/stable/c/5db17805b6ba4c34dab303f49aea3562fc25af75"}, {"url": "https://git.kernel.org/stable/c/99bc25748e394d17f9e8b10cc7f273b8e64c1c7e"}, {"url": "https://git.kernel.org/stable/c/43626dade36fa74d3329046f4ae2d7fdefe401c6"}], "title": "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48671", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-06T15:12:14.079254Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:24.089Z"}, "title": "CISA ADP Vulnrichment"}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BAF6A51F-91BE-470A-BC94-106FBEBDE4F6", "versionEndExcluding": "5.4.215", "versionStartIncluding": "5.4.213", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A93088C4-AC28-4734-A727-4429288BC061", "versionEndExcluding": "5.10.145", "versionStartIncluding": "5.10.143", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6BA07670-1C67-48AF-A2DC-E61C989786BB", "versionEndExcluding": "5.15.70", "versionStartExcluding": "5.15.68", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "326EC0A7-7FF1-4113-B850-72AEF9BCCB37", "versionEndExcluding": "5.19.11", "versionStartIncluding": "5.19.9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()\n\nsyzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at\ncpuset_attach() [1], for commit 4f7e7236435ca0ab (\"cgroup: Fix\nthreadgroup_rwsem <-> cpus_read_lock() deadlock\") missed that\ncpuset_attach() is also called from cgroup_attach_task_all().\nAdd cpus_read_lock() like what cgroup_procs_write_start() does."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: cgroup: agregue cpus_read_lock() faltante a cgroup_attach_task_all() syzbot est\u00e1 presionando la advertencia percpu_rwsem_assert_held(&cpu_hotplug_lock) en cpuset_attach() [1], para el commit 4f7e7236435ca0ab (\"cgroup: Fix threadgroup_rwsem <- > cpus_read_lock() deadlock\") se perdi\u00f3 que cpuset_attach() tambi\u00e9n se llama desde cgroup_attach_task_all(). Agregue cpus_read_lock() como lo hace cgroup_procs_write_start()."}], "id": "CVE-2022-48671", "lastModified": "2024-05-23T20:26:32.357", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-05-03T15:15:07.433", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/07191f984842d50020789ff14c75da436a7f46a9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/321488cfac7d0eb6d97de467015ff754f85813ff"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/43626dade36fa74d3329046f4ae2d7fdefe401c6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5db17805b6ba4c34dab303f49aea3562fc25af75"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/99bc25748e394d17f9e8b10cc7f273b8e64c1c7e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9f267393b036f1470fb12fb892d59e7ff8aeb58d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-667"}], "source": "nvd@nist.gov", "type": "Primary"}]}