In the Linux kernel, the following vulnerability has been resolved:
perf: Fix list corruption in perf_cgroup_switch()
There’s list corruption on cgrp_cpuctx_list. This happens on the
following path:
perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list)
cpu_ctx_sched_in
ctx_sched_in
ctx_pinned_sched_in
merge_sched_in
perf_cgroup_event_disable: remove the event from the list
Use list_for_each_entry_safe() to allow removing an entry during
iteration.
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"kernel/events/core.c"
],
"versions": [
{
"version": "058fe1c0440e",
"lessThan": "5d76ed422340",
"status": "affected",
"versionType": "git"
},
{
"version": "058fe1c0440e",
"lessThan": "30d9f3cbe47e",
"status": "affected",
"versionType": "git"
},
{
"version": "058fe1c0440e",
"lessThan": "a2ed7b29d067",
"status": "affected",
"versionType": "git"
},
{
"version": "058fe1c0440e",
"lessThan": "f6b5d51976fc",
"status": "affected",
"versionType": "git"
},
{
"version": "058fe1c0440e",
"lessThan": "7969fe91c983",
"status": "affected",
"versionType": "git"
},
{
"version": "058fe1c0440e",
"lessThan": "2142bc1469a3",
"status": "affected",
"versionType": "git"
},
{
"version": "058fe1c0440e",
"lessThan": "5f4e5ce638e6",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"kernel/events/core.c"
],
"versions": [
{
"version": "4.11",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.11",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.14.267",
"lessThanOrEqual": "4.14.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.230",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.180",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.101",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.24",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.16.10",
"lessThanOrEqual": "5.16.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.17",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/2142bc1469a316fddd10012d76428f7265258f81
git.kernel.org/stable/c/30d9f3cbe47e1018ddc8069ac5b5c9e66fbdf727
git.kernel.org/stable/c/5d76ed4223403f90421782adb2f20a9ecbc93186
git.kernel.org/stable/c/5f4e5ce638e6a490b976ade4a40017b40abb2da0
git.kernel.org/stable/c/7969fe91c9830e045901970e9d755b7505881d4a
git.kernel.org/stable/c/a2ed7b29d0673ba361546e2d87dbbed149456c45
git.kernel.org/stable/c/f6b5d51976fcefef5732da3e3feb3ccff680f7c8