In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
sunrpc: route to a populated pool in svc_pool_for_cpu()<\/p>\n
svc_set_num_threads() spreads the requested threads evenly across the
\nservice’s pools (base = nrservs \/ sv_nrpools). When a service runs
\nfewer threads than it has pools — e.g. an nfsd configured with fewer
\nthreads than the host has NUMA nodes while running in “pernode” or
\n“percpu” mode — the trailing pools are left with no threads at all.<\/p>\n
svc_xprt_enqueue() selects a pool from the CPU servicing the transport,
\nqueues the transport on that pool’s sp_xprts, and only wakes a thread
\nfrom the same pool. Each thread services exclusively its own pool, so a
\ntransport that lands on a threadless pool is enqueued on sp_xprts and
\nnever picked up: the connection hangs indefinitely.<\/p>\n
Have svc_pool_for_cpu() skip pools that currently have no threads,
\nfalling back to the next populated pool. This trades NUMA locality for
\na guarantee that the work is actually serviced. sp_nrthreads is only
\nupdated under the service mutex; the lockless read here is a best-effort
\nrouting hint, so annotate it with data_race().<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
sunrpc: route to a populated pool in svc_pool_for_cpu()<\/p>\n
svc_set_num_threads() spreads the requested threads evenly across the
\nserv<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-21471","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/21471","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}