In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READONCE() when accessing fgrapharray[] In _ftracereturntohandler(), a loop iterates over the fgrapharray[] elements, which are fgraphops. The loop checks if an element is a fgraphstub to prevent using a fgraphstub afterward. However, if the compiler reloads fgrapharray[] after this check, it might race with an update to fgrapharray[] that introduces a fgraphstub. This could result in the stub being processed, but the stub contains a null "funchash" field, leading to a NULL pointer dereference. To ensure that the gops compared against the fgraphstub matches the gops processed later, add a READONCE(). A similar patch appears in commit 63a8dfb ("functiongraph: Add READONCE() when accessing fgraph_array[]").
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-21-generic-64k", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-cloud-tools-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-headers-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-headers-6.11.0-21-generic-64k", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-21", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-hwe-6.11-headers-6.11.0-21", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-hwe-6.11-tools-6.11.0-21", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-image-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-image-6.11.0-21-generic-dbgsym", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-21-generic-64k", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-21-generic-64k-dbgsym", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-21-generic-dbgsym", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-modules-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-modules-6.11.0-21-generic-64k", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-modules-ipu6-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-modules-ipu7-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-modules-usbio-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-modules-vision-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-tools-6.11.0-21-generic", "binary_version": "6.11.0-21.21~24.04.1" }, { "binary_name": "linux-tools-6.11.0-21-generic-64k", "binary_version": "6.11.0-21.21~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-headers-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-image-unsigned-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-image-unsigned-6.11.0-1017-oem-dbgsym", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-modules-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-modules-ipu6-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-modules-ipu7-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-modules-usbio-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-modules-vision-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-oem-6.11-headers-6.11.0-1017", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-oem-6.11-tools-6.11.0-1017", "binary_version": "6.11.0-1017.17" }, { "binary_name": "linux-tools-6.11.0-1017-oem", "binary_version": "6.11.0-1017.17" } ] }