Vulnerability in Kernel: psi state corruption when schedule() races with cgroup move
Summary
GSD-2021-1001138: psi: Fix psi state corruption when schedule() races with cgroup move. Affects Kernel versions >= 4117cebf1a9fcbf35b9aabf0e37b6c5eea296798, < d583d360a620e6229422b3455d0be082b8255f5e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The vulnerability in question affects the Kernel's psi (pressure stall information) feature, which measures resource pressure and helps in workload management. This vulnerability can lead to psi state corruption when there is a race condition between the schedule() function and a cgroup move operation.
Vulnerability Detail
The vulnerability arises due to a race condition between the schedule() function and a cgroup move operation. This race condition can result in psi state corruption, potentially leading to incorrect resource pressure information. Attackers may exploit this vulnerability to manipulate resource allocation and disrupt system performance. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the Kernel's psi feature can result in state corruption and potential resource allocation manipulation. It is crucial to update the Kernel to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software.
Psi is a feature in the Kernel that measures resource pressure and provides information about the system's ability to handle workload demands.
The vulnerability can lead to psi state corruption, potentially resulting in incorrect resource pressure information and system performance disruption.
The impact and attack plausibility of this vulnerability have not been proven yet.
To address this vulnerability, users should update their Kernel to version v5.13 or later, which includes the fix for this issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
