Описание
In the Linux kernel, the following vulnerability has been resolved:
smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
Coverity spotted that the cifs_sync_mid_result function could deadlock
"Thread deadlock (ORDER_REVERSAL) lock_order: Calling spin_lock acquires
lock TCP_Server_Info.srv_lock while holding lock TCP_Server_Info.mid_lock"
Addresses-Coverity: 1590401 ("Thread deadlock (ORDER_REVERSAL)")
A flaw was found in the Linux kernel's SMB3 client component. This vulnerability allows an authenticated local user to cause a Denial of Service (DoS) by triggering an improper lock sequence during concurrent network file operations. Due to a lock order reversal in the cifs_sync_mid_result function, conflicting threads can enter a deadlock where processes wait on each other indefinitely, causing the system to hang.
Отчет
A moderate severity denial of service flaw was found in the Linux kernel SMB3 client. Due to a lock order reversal in the cifs_sync_mid_result function, an authenticated local user can trigger a deadlock by performing concurrent SMB3 network file operations: conflicting threads wait on each other indefinitely, causing the system to hang. Only availability is affected; the flaw has no impact on confidentiality or integrity. All Red Hat Enterprise Linux 6, 7, 8 and 9 kernel and kernel-rt streams, including the z-stream update streams, as well as the Hosted OpenShift Clusters (OSD and ARO) offerings, are not affected because the vulnerable code is not present in the Red Hat kernel builds. The Fedora community distribution is affected, and a fix is being pursued through the upstream kernel updates under a DELEGATED resolution. Red Hat rates this flaw Moderate (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). This differs from the CVE.org record, which scores the flaw 7.5 Important with a network attack vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H): Red Hat assesses that triggering the deadlock requires an authenticated local user able to issue concurrent CIFS operations rather than a remote unauthenticated attacker.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected |
Показывать по
Дополнительная информация
Статус:
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result Coverity spotted that the cifs_sync_mid_result function could deadlock "Thread deadlock (ORDER_REVERSAL) lock_order: Calling spin_lock acquires lock TCP_Server_Info.srv_lock while holding lock TCP_Server_Info.mid_lock" Addresses-Coverity: 1590401 ("Thread deadlock (ORDER_REVERSAL)")
In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result Coverity spotted that the cifs_sync_mid_result function could deadlock "Thread deadlock (ORDER_REVERSAL) lock_order: Calling spin_lock acquires lock TCP_Server_Info.srv_lock while holding lock TCP_Server_Info.mid_lock" Addresses-Coverity: 1590401 ("Thread deadlock (ORDER_REVERSAL)")
smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
In the Linux kernel, the following vulnerability has been resolved: s ...
In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result Coverity spotted that the cifs_sync_mid_result function could deadlock "Thread deadlock (ORDER_REVERSAL) lock_order: Calling spin_lock acquires lock TCP_Server_Info.srv_lock while holding lock TCP_Server_Info.mid_lock" Addresses-Coverity: 1590401 ("Thread deadlock (ORDER_REVERSAL)")
5.5 Medium
CVSS3