Wei Li

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A race condition during cpuhp processing in the Linux kernel's tracing/timerlat component can lead to timer corruption. This issue occurs when the "timerlat/1" thread is scheduled on CPU0, and the CPU may have already been removed from the cpu online mask during the offline process, resulting in the inability to select the right CPU. The problem arises from the asynchronous implementation of CPU online processing for osnoise through workers. Recommendations: To resolve this issue, update to Linux kernel version 6.6.58 or later. As a temporary workaround, consider disabling the timerlat functionality until a patch is available. Restrict access to the tracing/timerlat component to minimize the risk of exploitation. Avoid using the `timerlat irq` function in the affected kernel versions until the issue is resolved. At the moment, there is no other information about additional mitigation measures.

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability in the Linux kernel has been resolved, specifically in the tracing/timerlat component. The issue involves a deadlock scenario introduced by the use of interface lock in the stop kthread() function, which is the offline callback for "trace/osnoise:online". This deadlock can occur due to the interaction between multiple threads (T1, T2, and T3) and the locking mechanisms used. The vulnerability is fixed by using xchg() instead of interface lock to protect the "kthread" field of the osn var, and by using for each online cpu() in stop per cpu kthreads() to avoid taking cpu read lock() again. Recommendations: For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider disabling the tracing/timerlat component until a patch is available. Restrict access to the vulnerable stop kthread() function to minimize the risk of exploitation. Avoid using the interface lock in the stop kthread() function until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: RealOne version 2.0 build 6.0.11.868 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved through a crafted embed tag. Recommendations: For RealOne version 2.0 build 6.0.11.868, consider disabling the pnxr3260.dll plugin in Internet Explorer as a temporary workaround until a patch is available. Restrict access to the embed tag functionality to minimize the risk of exploitation.