PT-2022-7446

CVE-2022-48671

·

Published

2022-08-25

·

Updated

2025-01-24

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a missing cpus read lock() in the cgroup attach task all() function, which can cause a deadlock. This problem is associated with the cpuset attach() function and the cpu hotplug lock. The vulnerability can be exploited to cause a denial of service. There is no information about the estimated number of potentially affected devices or real-world incidents.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
OESA-2024-2080
OPENSUSE-SU-2024_1644-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:1644-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2189-1
SUSE-SU-2025:0231-1
Found an issue in the description? Have something to add? Feel free to write us 👾