CVE-2024-50060

io_uring: check if we need to reschedule during overflow flush

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

io_uring: check if we need to reschedule during overflow flush

In terms of normal application usage, this list will always be empty.

And if an application does overflow a bit, it'll have a few entries.

However, nothing obviously prevents syzbot from running a test case

that generates a ton of overflow entries, and then flushing them can

take quite a while.

Check for needing to reschedule while flushing, and drop our locks and

do so if necessary. There's no state to maintain here as overflows

always prune from head-of-list, hence it's fine to drop and reacquire

the locks at the end of the loop.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 12.0th percentile
Published
2024-10-21T19:39Z
EPSS history
Timeline
  • 21 OCT 19:39Z
    io_uring: check if we need to reschedule during overflow flush
    cvelistv5