CVE-2022-49001CWE-362

CVE-2022-49001

High · published October 22, 2024

CVSS v3.1
7.0
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

riscv: fix race when vmap stack overflow

Currently, when detecting vmap stack overflow, riscv firstly switches

to the so called shadow stack, then use this shadow stack to call the

get_overflow_stack() to get the overflow stack. However, there's

a race here if two or more harts use the same shadow stack at the same

time.

To solve this race, we introduce spin_shadow_stack atomic var, which

will be swap between its own address and 0 in atomic way, when the

var is set, it means the shadow_stack is being used; when the var

is cleared, it means the shadow_stack isn't being used.

[Palmer: Add AQ to the swap, and also some comments.]

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-10-22T00:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 5.14, < 5.15.825.15.82
linux/linux_kernel≥ 5.16, < 6.0.126.0.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 21 OCT 20:06Z
    riscv: fix race when vmap stack overflow
    cvelistv5