High · published August 25, 2022
A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.8, < 5.10.120 | 5.10.120 |
| linux/linux_kernel | ≥ 5.11, < 5.15.45 | 5.15.45 |
| linux/linux_kernel | ≥ 5.16, < 5.17.13 | 5.17.13 |
| linux/linux_kernel | ≥ 5.18, < 5.18.2 | 5.18.2 |