Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability has been identified in the Linux kernel's perf/core component, specifically within the perf_iterate_ctx() function. This function traverses RCU lists but currently lacks the necessary RCU read lock protection. As a result, lockdep warnings are generated when running perf probe with unshare(1) under CONFIG_PROVE_RCU_LIST=y. The absence of proper RCU read lock handling can lead to suspicious RCU usage warnings, indicating that the RCU-list was traversed outside of a designated reader section.
The lack of proper RCU read lock protection can cause lockdep warnings, which may indicate potential issues with RCU usage that could be exploited or lead to incorrect behavior in the kernel.
The vulnerability has been addressed by adding the necessary rcu_read_lock() and rcu_read_unlock() calls around the perf_iterate_ctx() invocation in the perf_event_exec() function.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.