Linux Kernel DLM Lowcomms Race Condition Vulnerability

A race condition vulnerability has been identified in the Linux kernel's Distributed Lock Manager (DLM) lowcomms communication handling. This issue arises in versions prior to 5.19.0-rc3, where the function '_dlm_lowcomms_commit_msg()' can process a message reference that has been prematurely released, leading to the message index containing invalid data. This vulnerability was observed during the 'dlm_locktorture' test, which is not part of the mainline test suite.

Impact

Exploitation of this vulnerability can cause a race condition, where a message's reference count is improperly managed, potentially leading to use-after-free scenarios.

Reproduction

The vulnerability can be reproduced by running the 'dlm_locktorture' test, which is available as part of the Linux kernel's locking test suite. This test can be executed using the 'locktorture' module, which is included in the kernel's 'tools/testing/selftests' directory.

Remediation

Users can upgrade to Linux kernel versions through 5.19.0-rc3 to address this vulnerability.