CVE-2022-48800

一、漏洞信息
 漏洞编号：[CVE-2022-48800](https://nvd.nist.gov/vuln/detail/CVE-2022-48800)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0
 CVSS V2.0分值：
  BaseScore：0.0 Low
  Vector：CVSS：2.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:mm: vmscan: remove deadlock due to throttling failing to make progressA soft lockup bug in kcompactd was reported in a private bugzilla withthe following visible in dmesg;  watchdog: BUG: soft lockup - CPU#33 stuck for 26s! [kcompactd0:479]  watchdog: BUG: soft lockup - CPU#33 stuck for 52s! [kcompactd0:479]  watchdog: BUG: soft lockup - CPU#33 stuck for 78s! [kcompactd0:479]  watchdog: BUG: soft lockup - CPU#33 stuck for 104s! [kcompactd0:479]The machine had 256G of RAM with no swap and an earlier failedallocation indicated that node 0 where kcompactd was run was potentiallyunreclaimable;  Node 0 active_anon:29355112kB inactive_anon:2913528kB active_file:0kB    inactive_file:0kB unevictable:64kB isolated(anon):0kB isolated(file):0kB    mapped:8kB dirty:0kB writeback:0kB shmem:26780kB shmem_thp:    0kB shmem_pmdmapped: 0kB anon_thp: 23480320kB writeback_tmp:0kB    kernel_stack:2272kB pagetables:24500kB all_unreclaimable? yesVlastimil Babka investigated a crash dump and found that a taskmigrating pages was trying to drain PCP lists;  PID: 52922  TASK: ffff969f820e5000  CPU: 19  COMMAND:  kworker/u128:3   Call Trace:     __schedule     schedule     schedule_timeout     wait_for_completion     __flush_work     __drain_all_pages     __alloc_pages_slowpath.constprop.114     __alloc_pages     alloc_migration_target     migrate_pages     migrate_to_node     do_migrate_pages     cpuset_migrate_mm_workfn     process_one_work     worker_thread     kthread     ret_from_forkThis failure is specific to CONFIG_PREEMPT=n builds.  The root of theproblem is that kcompact0 is not rescheduling on a CPU while a task thathas isolated a large number of the pages from the LRU is waiting onkcompact0 to reschedule so the pages can be released.  Whileshrink_inactive_list() only loops once around too_many_isolated, reclaimcan continue without rescheduling if sc->skipped_deactivate == 1 whichcould happen if there was no file LRU and the inactive anon list was notlow.
 漏洞公开时间：2024-07-16 20:15:04
 漏洞创建时间：2024-07-31 12:00:47
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2022-48800
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/3980cff6349687f73d5109f156f23cb261c24164 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b485c6f1f9f54b81443efda5f3d8a5036ba2cd91 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48800 | https://bugzilla.suse.com/show_bug.cgi?id=1227954 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2022/CVE-2022-48800.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1227954 |
| suse_bugzilla | https://git.kernel.org/stable/c/3980cff6349687f73d5109f156f23cb261c24164 | https://bugzilla.suse.com/show_bug.cgi?id=1227954 |
| suse_bugzilla | https://git.kernel.org/stable/c/b485c6f1f9f54b81443efda5f3d8a5036ba2cd91 | https://bugzilla.suse.com/show_bug.cgi?id=1227954 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2022-48800 | https://bugzilla.suse.com/show_bug.cgi?id=1227954 |
| ubuntu | https://www.cve.org/CVERecord?id=CVE-2022-48800 | https://ubuntu.com/security/CVE-2022-48800 |
| ubuntu | https://git.kernel.org/linus/b485c6f1f9f54b81443efda5f3d8a5036ba2cd91 (5.17-rc4) | https://ubuntu.com/security/CVE-2022-48800 |
| ubuntu | https://git.kernel.org/stable/c/3980cff6349687f73d5109f156f23cb261c24164 | https://ubuntu.com/security/CVE-2022-48800 |
| ubuntu | https://git.kernel.org/stable/c/b485c6f1f9f54b81443efda5f3d8a5036ba2cd91 | https://ubuntu.com/security/CVE-2022-48800 |
| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2022-48800 | https://ubuntu.com/security/CVE-2022-48800 |
| ubuntu | https://launchpad.net/bugs/cve/CVE-2022-48800 | https://ubuntu.com/security/CVE-2022-48800 |
| ubuntu | https://security-tracker.debian.org/tracker/CVE-2022-48800 | https://ubuntu.com/security/CVE-2022-48800 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| linux |  | https://git.kernel.org/linus/b485c6f1f9f54b81443efda5f3d8a5036ba2cd91 | https://git.kernel.org/linus/d818fca1cac31b1fc9301bda83e195a46fb4ebaa | ubuntu |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
                    In the Linux kernel, the following vulnerability has been resolved:mm: vmscan: remove deadlock due to throttling failing to make progressA soft lockup bug in kcompactd was reported in a private bugzilla withthe following visible in dmesg;  watchdog: BUG: soft lockup - CPU#33 stuck for 26s! [kcompactd0:479]  watchdog: BUG: soft lockup - CPU#33 stuck for 52s! [kcompactd0:479]  watchdog: BUG: soft lockup - CPU#33 stuck for 78s! [kcompactd0:479]  watchdog: BUG: soft lockup - CPU#33 stuck for 104s! [kcompactd0:479]The machine had 256G of RAM with no swap and an earlier failedallocation indicated that node 0 where kcompactd was run was potentiallyunreclaimable;  Node 0 active_anon:29355112kB inactive_anon:2913528kB active_file:0kB    inactive_file:0kB unevictable:64kB isolated(anon):0kB isolated(file):0kB    mapped:8kB dirty:0kB writeback:0kB shmem:26780kB shmem_thp:    0kB shmem_pmdmapped: 0kB anon_thp: 23480320kB writeback_tmp:0kB    kernel_stack:2272kB pagetables:24500kB all_unreclaimable? yesVlastimil Babka investigated a crash dump and found that a taskmigrating pages was trying to drain PCP lists;  PID: 52922  TASK: ffff969f820e5000  CPU: 19  COMMAND:  kworker/u128:3   Call Trace:     __schedule     schedule     schedule_timeout     wait_for_completion     __flush_work     __drain_all_pages     __alloc_pages_slowpath.constprop.114     __alloc_pages     alloc_migration_target     migrate_pages     migrate_to_node     do_migrate_pages     cpuset_migrate_mm_workfn     process_one_work     worker_thread     kthread     ret_from_forkThis failure is specific to CONFIG_PREEMPT=n builds.  The root of theproblem is that kcompact0 is not rescheduling on a CPU while a task thathas isolated a large number of the pages from the LRU is waiting onkcompact0 to reschedule so the pages can be released.  Whileshrink_inactive_list() only loops once around too_many_isolated, reclaimcan continue without rescheduling if sc->skipped_deactivate == 1 whichcould happen if there was no file LRU and the inactive anon list was notlow.         
 openEuler评分：
  2.5
 Vector：CVSS：2.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS-SP4(4.19.90):不受影响
2.openEuler-22.03-LTS-SP1(5.10.0):不受影响
3.openEuler-22.03-LTS-SP3(5.10.0):不受影响
4.openEuler-22.03-LTS-SP4(5.10.0):不受影响
5.master(6.1.0):不受影响
6.openEuler-24.03-LTS(6.6.0):不受影响
7.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP4(4.19.90):否
2.openEuler-22.03-LTS-SP1(5.10.0):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.master(6.1.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-22.03-LTS-SP4(5.10.0):否

src-openEuler/kernel
关闭

内容风险标识

评论 (8)

src-openEuler/kernel关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2022-48800

评论 (8)

搜索帮助

src-openEuler/kernel
关闭