CVE-2022-48944
MEDIUMLinux Kernel 5.15.3-5.15.26 and 5.16.0-5.16.12 - Denial of Service via sched_fork Race Condition
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sched_fork() access an invalid sched_task_group") fixed a fork race vs cgroup, it opened up a race vs syscalls by not placing the task on the runqueue before it gets exposed through the pidhash. Commit 13765de8148f ("sched/fair: Fix fault in reweight_entity") is trying to fix a single instance of this, instead fix the whole class of issues, effectively reverting this commit.
References (3)
Core 3
Scores
CVSS v3
5.5
EPSS
0.0021
EPSS Percentile
11.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (18)
linux/Kernel
< 5.15.27linux
linux/Kernel
5.16.0 - 5.16.13linux
Linux/Linux
< 5.16
Linux/Linux
25d40b828fb855ee62e1039c65a666c9afd60786
Linux/Linux
3869eecf050416a1d19bac60926f6b5d64b0aa58 - 3411613611a5cddf7e80908010dc87cb527dd13b
Linux/Linux
4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a - b1e8206582f9d680cff7d04828708c8b6ab32957
Linux/Linux
4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a - c65cfd89cef669d90c59f3bf150af6458137a04f
Linux/Linux
5.10.80 - 5.11
Linux/Linux
5.14.19 - 5.15
Linux/Linux
5.15.27 - 5.15.*
... and 8 more
Published
Aug 30, 2024
Tracked Since
Feb 18, 2026