In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
tracing: Fix subbuf resize races with trace_pipe_raw readers<\/p>\n
Concurrent subbuffer resizes may crash trace_pipe_raw readers or leak
\nuninitialized memory to userspace due to stale size values.<\/p>\n
Modify ring_buffer_alloc_read_page() to handle the resizing of an
\nexisting buffer_data_read_page if necessary and add a new
\nring_buffer_read_page_size(). This new function enables ring-buffer
\nbuffer_data_read_page users to not call the racy
\nring_buffer_subbuf_size_get(). This makes the spare_size member of
\nftrace_buffer_info redundant.<\/p>\n
Finally, handle buffer_data_read_page\/reader_page order discrepancy in
\nring_buffer_read_page(). On a mismatch simply copy manually the data to
\nthe buffer_data_read_page.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
tracing: Fix subbuf resize races with trace_pipe_raw readers<\/p>\n
Concurrent subbuffer resizes may crash trace_pipe_raw readers or leak<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-29187","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/29187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29187"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29187"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}