Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's 9p file system implementation can disrupt proper thread scheduling for read operations. This issue arises in the 'p9_fd_request' function, where the 'p9_read_work' routine fails to appropriately signal the reception thread when data is available to be read. The problem is linked to a prior optimization in the pipe reading mechanism, which prevents unnecessary wake-up calls to the writing process when the pipe is full. As a result, the read polling mechanism no longer functions correctly, leading to potential delays in data processing.
The vulnerability can cause a denial of service by disrupting the normal flow of data processing, potentially leading to increased latency or unresponsiveness in applications that rely on the 9p file system.
The vulnerability can be reproduced by filling a pipe to capacity and then attempting to read from it using the 9p file system's read work function. The pipe's fullness will prevent the usual wake-up call to the reading thread, causing a backlog in data processing.
Users can update to the latest version of the Linux kernel, where this vulnerability has been addressed. Instructions for updating the kernel can be found in the official Linux documentation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.