Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A lockdep warning related to the RCU (Read-Copy-Update) mechanism has been addressed in the Linux kernel. The issue arose in a preemptible kernel when running the rcutorture tool with a non-zero fqs_duration parameter. This combination triggered a warning because the rcu_force_quiescent_state() function improperly used __this_cpu_read() in preemptible code, instead of the correct raw_cpu_read(). The vulnerability is present in Linux kernel versions 6.0.0-rc1-yoctodev-standard and prior.
The vulnerability could lead to improper handling of CPU preemption in RCU operations, potentially causing synchronization issues or performance degradation.
To reproduce this issue, run a Linux kernel version that is preemptible (with CONFIG_PREEMPTION=y) and execute the rcutorture tool with a non-zero fqs_duration parameter. This will generate a lockdep warning about the improper use of __this_cpu_read() in preemptible code.
Users can upgrade to the latest stable version of the Linux kernel, where this issue has been fixed. Instructions for downloading the latest version can be found on the official Linux kernel website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.