In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix possible data races in gfs2showoptions()
Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in gfs2showoptions():
val = sdp->sdtune.gtlogdsecs; if (val != 30) seqprintf(s, ",commit=%d", val);
And thus can cause data races when gfs2showoptions() and other functions such as gfs2_reconfigure() are concurrently executed:
spinlock(>->gtspin); gt->gtlogdsecs = newargs->ar_commit;
To fix these possible data races, the lock sdp->sdtune.gtspin is acquired before accessing the fields of gfs2_tune and released after these accesses.
Further changes by Andreas:
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53622.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53622.json"
[
{
"id": "CVE-2023-53622-247a69b5",
"target": {
"function": "gfs2_show_options",
"file": "fs/gfs2/super.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42077d4de49e4d9c773c97c42d5383b4899a8f9d",
"digest": {
"function_hash": "36428485103905438461848792703831413908",
"length": 2549.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53622-3b8755e7",
"target": {
"file": "fs/gfs2/super.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@235a5ae73cea29109a3e06f100493f17857e6a93",
"digest": {
"threshold": 0.9,
"line_hashes": [
"119692600500567133929273104021025098222",
"48856730706700797107087329230450894892",
"124321104780615016807546645088139611806",
"68003895982886563340171007802325306353",
"66030855974965194692900263898896219072",
"282059356728426769736878972421145611614",
"316396620930794655145152029615382354044",
"301707917318859027466178163219147132473",
"320020163079461795424535360252943262047",
"184764208008076572658883731444927344865",
"65099601896871862908714721431760577073",
"286376728012402814025667089472393270175",
"149762205729212481296588555318790655421",
"94599899753327934921570665269129986342",
"93129951302462291013460039303865828905",
"264680266620232937854764057123978398691",
"9192914178307977406751181128077593924",
"175643505305921767438944263358993257835"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53622-5ddb2cd1",
"target": {
"function": "gfs2_show_options",
"file": "fs/gfs2/super.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@235a5ae73cea29109a3e06f100493f17857e6a93",
"digest": {
"function_hash": "36428485103905438461848792703831413908",
"length": 2549.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53622-75dd7f5d",
"target": {
"file": "fs/gfs2/super.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4a7ab57effbed42624842f2ab2a49b177c21a47",
"digest": {
"threshold": 0.9,
"line_hashes": [
"119692600500567133929273104021025098222",
"48856730706700797107087329230450894892",
"124321104780615016807546645088139611806",
"68003895982886563340171007802325306353",
"66030855974965194692900263898896219072",
"282059356728426769736878972421145611614",
"316396620930794655145152029615382354044",
"301707917318859027466178163219147132473",
"320020163079461795424535360252943262047",
"184764208008076572658883731444927344865",
"65099601896871862908714721431760577073",
"286376728012402814025667089472393270175",
"149762205729212481296588555318790655421",
"94599899753327934921570665269129986342",
"93129951302462291013460039303865828905",
"264680266620232937854764057123978398691",
"9192914178307977406751181128077593924",
"175643505305921767438944263358993257835"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53622-903c992f",
"target": {
"function": "gfs2_show_options",
"file": "fs/gfs2/super.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4a7ab57effbed42624842f2ab2a49b177c21a47",
"digest": {
"function_hash": "36428485103905438461848792703831413908",
"length": 2549.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53622-be4b8cbd",
"target": {
"file": "fs/gfs2/super.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42077d4de49e4d9c773c97c42d5383b4899a8f9d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"119692600500567133929273104021025098222",
"48856730706700797107087329230450894892",
"124321104780615016807546645088139611806",
"68003895982886563340171007802325306353",
"66030855974965194692900263898896219072",
"282059356728426769736878972421145611614",
"316396620930794655145152029615382354044",
"301707917318859027466178163219147132473",
"320020163079461795424535360252943262047",
"184764208008076572658883731444927344865",
"65099601896871862908714721431760577073",
"286376728012402814025667089472393270175",
"149762205729212481296588555318790655421",
"94599899753327934921570665269129986342",
"93129951302462291013460039303865828905",
"264680266620232937854764057123978398691",
"9192914178307977406751181128077593924",
"175643505305921767438944263358993257835"
]
},
"signature_type": "Line"
}
]