一、漏洞信息

漏洞编号：[CVE-2024-53160](https://nvd.nist.gov/vuln/detail/CVE-2024-53160)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcuKCSAN reports a data race when access the krcp->monitor_work.timer.expiresvariable in the schedule_delayed_monitor_work() function:<snip>BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcuread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1: schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline] kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839 trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441 bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203 generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849 bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143 __sys_bpf+0x2e5/0x7a0 __do_sys_bpf kernel/bpf/syscall.c:5741 [inline] __se_sys_bpf kernel/bpf/syscall.c:5739 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739 x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7fwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0: __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173 add_timer_global+0x51/0x70 kernel/time/timer.c:1330 __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523 queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552 queue_delayed_work include/linux/workqueue.h:677 [inline] schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline] kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244Reported by Kernel Concurrency Sanitizer on:CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: events_unbound kfree_rcu_monitor<snip>kfree_rcu_monitor() rearms the work if a krcp has to be stilloffloaded and this is done without holding krcp->lock, whereasthe kvfree_call_rcu() holds it.Fix it by acquiring the krcp->lock for kfree_rcu_monitor() soboth functions do not race anymore.

漏洞公开时间：2024-12-24 20:15:24

漏洞创建时间：2024-12-24 20:28:46

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-53160

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | |

一、漏洞信息

漏洞编号：[CVE-2024-53160](https://nvd.nist.gov/vuln/detail/CVE-2024-53160)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcuKCSAN reports a data race when access the krcp->monitor_work.timer.expiresvariable in the schedule_delayed_monitor_work() function:<snip>BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcuread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1: schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline] kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839 trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441 bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203 generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849 bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143 __sys_bpf+0x2e5/0x7a0 __do_sys_bpf kernel/bpf/syscall.c:5741 [inline] __se_sys_bpf kernel/bpf/syscall.c:5739 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739 x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7fwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0: __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173 add_timer_global+0x51/0x70 kernel/time/timer.c:1330 __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523 queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552 queue_delayed_work include/linux/workqueue.h:677 [inline] schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline] kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244Reported by Kernel Concurrency Sanitizer on:CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: events_unbound kfree_rcu_monitor<snip>kfree_rcu_monitor() rearms the work if a krcp has to be stilloffloaded and this is done without holding krcp->lock, whereasthe kvfree_call_rcu() holds it.Fix it by acquiring the krcp->lock for kfree_rcu_monitor() soboth functions do not race anymore.

漏洞公开时间：2024-12-24 20:15:24

漏洞创建时间：2024-12-24 20:28:46

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-53160

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | |

一、漏洞信息

漏洞编号：[CVE-2024-53160](https://nvd.nist.gov/vuln/detail/CVE-2024-53160)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcuKCSAN reports a data race when access the krcp->monitor_work.timer.expiresvariable in the schedule_delayed_monitor_work() function:<snip>BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcuread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1: schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline] kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839 trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441 bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203 generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849 bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143 __sys_bpf+0x2e5/0x7a0 __do_sys_bpf kernel/bpf/syscall.c:5741 [inline] __se_sys_bpf kernel/bpf/syscall.c:5739 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739 x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7fwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0: __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173 add_timer_global+0x51/0x70 kernel/time/timer.c:1330 __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523 queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552 queue_delayed_work include/linux/workqueue.h:677 [inline] schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline] kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244Reported by Kernel Concurrency Sanitizer on:CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: events_unbound kfree_rcu_monitor<snip>kfree_rcu_monitor() rearms the work if a krcp has to be stilloffloaded and this is done without holding krcp->lock, whereasthe kvfree_call_rcu() holds it.Fix it by acquiring the krcp->lock for kfree_rcu_monitor() soboth functions do not race anymore.

漏洞公开时间：2024-12-24 20:15:24

漏洞创建时间：2024-12-24 20:28:46

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-53160

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024122431-CVE-2024-53160-692f@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

7.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

7.openEuler-24.03-LTS-Next:

原因说明：

7.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-53160](https://nvd.nist.gov/vuln/detail/CVE-2024-53160)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcuKCSAN reports a data race when access the krcp->monitor_work.timer.expiresvariable in the schedule_delayed_monitor_work() function:<snip>BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcuread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1: schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline] kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839 trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441 bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203 generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849 bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143 __sys_bpf+0x2e5/0x7a0 __do_sys_bpf kernel/bpf/syscall.c:5741 [inline] __se_sys_bpf kernel/bpf/syscall.c:5739 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739 x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7fwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0: __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173 add_timer_global+0x51/0x70 kernel/time/timer.c:1330 __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523 queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552 queue_delayed_work include/linux/workqueue.h:677 [inline] schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline] kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244Reported by Kernel Concurrency Sanitizer on:CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: events_unbound kfree_rcu_monitor<snip>kfree_rcu_monitor() rearms the work if a krcp has to be stilloffloaded and this is done without holding krcp->lock, whereasthe kvfree_call_rcu() holds it.Fix it by acquiring the krcp->lock for kfree_rcu_monitor() soboth functions do not race anymore.

漏洞公开时间：2024-12-24 20:15:24

漏洞创建时间：2024-12-24 20:28:46

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-53160

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024122431-CVE-2024-53160-692f@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 |

一、漏洞信息

漏洞编号：[CVE-2024-53160](https://nvd.nist.gov/vuln/detail/CVE-2024-53160)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcuKCSAN reports a data race when access the krcp->monitor_work.timer.expiresvariable in the schedule_delayed_monitor_work() function:<snip>BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcuread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1: schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline] kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839 trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441 bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203 generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849 bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143 __sys_bpf+0x2e5/0x7a0 __do_sys_bpf kernel/bpf/syscall.c:5741 [inline] __se_sys_bpf kernel/bpf/syscall.c:5739 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739 x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7fwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0: __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173 add_timer_global+0x51/0x70 kernel/time/timer.c:1330 __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523 queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552 queue_delayed_work include/linux/workqueue.h:677 [inline] schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline] kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244Reported by Kernel Concurrency Sanitizer on:CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: events_unbound kfree_rcu_monitor<snip>kfree_rcu_monitor() rearms the work if a krcp has to be stilloffloaded and this is done without holding krcp->lock, whereasthe kvfree_call_rcu() holds it.Fix it by acquiring the krcp->lock for kfree_rcu_monitor() soboth functions do not race anymore.

漏洞公开时间：2024-12-24 20:15:24

漏洞创建时间：2024-12-24 20:28:46

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-53160

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024122431-CVE-2024-53160-692f@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-53160 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

修复是否涉及abi变化(是/否)：

原因说明：

一、漏洞信息

漏洞编号：[CVE-2024-53160](https://nvd.nist.gov/vuln/detail/CVE-2024-53160)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcuKCSAN reports a data race when access the krcp->monitor_work.timer.expiresvariable in the schedule_delayed_monitor_work() function:<snip>BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcuread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1: schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline] kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839 trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441 bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203 generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849 bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143 __sys_bpf+0x2e5/0x7a0 __do_sys_bpf kernel/bpf/syscall.c:5741 [inline] __se_sys_bpf kernel/bpf/syscall.c:5739 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739 x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7fwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0: __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173 add_timer_global+0x51/0x70 kernel/time/timer.c:1330 __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523 queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552 queue_delayed_work include/linux/workqueue.h:677 [inline] schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline] kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244Reported by Kernel Concurrency Sanitizer on:CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: events_unbound kfree_rcu_monitor<snip>kfree_rcu_monitor() rearms the work if a krcp has to be stilloffloaded and this is done without holding krcp->lock, whereasthe kvfree_call_rcu() holds it.Fix it by acquiring the krcp->lock for kfree_rcu_monitor() soboth functions do not race anymore.

漏洞公开时间：2024-12-24 20:15:24

漏洞创建时间：2024-12-24 20:28:46

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-53160

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024122431-CVE-2024-53160-692f@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-53160 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

一、漏洞信息

漏洞编号：[CVE-2024-53160](https://nvd.nist.gov/vuln/detail/CVE-2024-53160)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcuKCSAN reports a data race when access the krcp->monitor_work.timer.expiresvariable in the schedule_delayed_monitor_work() function:<snip>BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcuread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1: schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline] kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839 trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441 bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203 generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849 bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143 __sys_bpf+0x2e5/0x7a0 __do_sys_bpf kernel/bpf/syscall.c:5741 [inline] __se_sys_bpf kernel/bpf/syscall.c:5739 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739 x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7fwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0: __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173 add_timer_global+0x51/0x70 kernel/time/timer.c:1330 __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523 queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552 queue_delayed_work include/linux/workqueue.h:677 [inline] schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline] kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244Reported by Kernel Concurrency Sanitizer on:CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: events_unbound kfree_rcu_monitor<snip>kfree_rcu_monitor() rearms the work if a krcp has to be stilloffloaded and this is done without holding krcp->lock, whereasthe kvfree_call_rcu() holds it.Fix it by acquiring the krcp->lock for kfree_rcu_monitor() soboth functions do not race anymore.

漏洞公开时间：2024-12-24 20:15:24

漏洞创建时间：2024-12-24 20:28:46

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-53160

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-53160 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| suse_bugzilla | https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263 | https://bugzilla.suse.com/show_bug.cgi?id=1234810 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024122431-CVE-2024-53160-692f@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2333982 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-53160 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

In the Linux kernel, the following vulnerability has been resolved:rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcuKCSAN reports a data race when access the krcp-&gt;monitor_work.timer.expiresvariable in the schedule_delayed_monitor_work() function:&lt;snip&gt;BUG: KCSAN: data-race in __mod_timer / kvfree_call_rcuread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1: schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline] kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839 trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441 bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203 generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849 bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143 __sys_bpf+0x2e5/0x7a0 __do_sys_bpf kernel/bpf/syscall.c:5741 [inline] __se_sys_bpf kernel/bpf/syscall.c:5739 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739 x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7fwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0: __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173 add_timer_global+0x51/0x70 kernel/time/timer.c:1330 __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523 queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552 queue_delayed_work include/linux/workqueue.h:677 [inline] schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline] kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244Reported by Kernel Concurrency Sanitizer on:CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: events_unbound kfree_rcu_monitor&lt;snip&gt;kfree_rcu_monitor() rearms the work if a &#34;krcp&#34; has to be stilloffloaded and this is done without holding krcp-&gt;lock, whereasthe kvfree_call_rcu() holds it.Fix it by acquiring the &#34;krcp-&gt;lock&#34; for kfree_rcu_monitor() soboth functions do not race anymore.The Linux kernel CVE team has assigned CVE-2024-53160 to this issue.

openEuler评分：

3.9

Vector：CVSS：3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

受影响版本排查(受影响/不受影响)：

3.openEuler-20.03-LTS-SP4(4.19.90):不受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP4(4.19.90):否

原因说明：

5.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在