Linux Kernel Cgroup Cpuset Vulnerability Leading to System Panic

A vulnerability in the Linux kernel's cgroup cpuset management has been addressed. The issue arose because the validation process in 'update_parent_subparts_cpumask()' incorrectly assessed whether a partition could utilize all CPUs from its parent cpuset. This flaw allowed a parent cpuset to be left with no effective CPUs available, even when tasks were present, potentially causing a system panic. The vulnerability has been fixed by correcting the validation check to ensure that a parent's effective CPUs are not a subset of the child's allowed CPUs. Additionally, the error code is now recorded when issues occur in 'update_prstate()', and a test case has been added to verify this fix.

Impact

Exploitation of this vulnerability could lead to a system panic, causing a denial of service by crashing the system.