Bugfix for CVE-2023-2006 · Pull Request !1825 · anolis/cloud-kernel

bugzilla: https://bugzilla.openanolis.cn/show_bug.cgi?id=4905

Description:
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

Broken commit info:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=245500d853e9f20036cec7df4f6984ece4c6bf26
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=245500d853e9f20036cec7df4f6984ece4c6bf26
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=245500d853e9f20036cec7df4f6984ece4c6bf26

Bugfix commit info:
https://github.com/torvalds/linux/commit/3bcd6c7eaa53
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=3bcd6c7eaa53
https://github.com/torvalds/linux/commit/3bcd6c7eaa53
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=3535c632e6d16c98f76e615da8dc0cb2750c66cc
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=38fe0988bd516f35c614ea9a5ff86c0d29f90c9a
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=60272ee9be89f5e8021898e65862f93e9fba90dc

类型	指派人员	状态
审查	Tony Lu David Xuan Zhuo	已完成 (0/0人)
测试	小龙已测试通过	已完成 (1/1人)

GVPanolis/cloud-kernel

搜索帮助

GVP anolis/cloud-kernel