Към съдържанието
Търсене

CVE-2025-71078: Linux, състезание за ресурс

7.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multihit issue during SLB preload On systems using the hash MMU, there is a software SLB preload cache that mirrors the entries loaded into the hardware SLB buffer. This preload cache is subject to periodic eviction — typically after every 256 context switches — to remove old entry. To optimize performance, the kernel skips switch_mmu_context() in switch_mm_irqs_off() when the prev and next mm_struct are the same. However, on hash MMU systems, this can lead to inconsistencies between the hardware SLB and the software preload cache. If an SLB entry for a process is evicted from the software cache on one CPU, and the same process later runs on another CPU without executing switch_mmu_context(), the hardware SLB may retain stale entries. If the kernel then attempts to reload that entry, it can trigger an SLB multi-hit error. The following timeline shows how stale SLB entries are created and can cause a multi-hit error when a process moves between CPUs without a MMU context switch. CPU 0 CPU 1 ----- ----- Process P exec swapper/1 load_elf_binary begin_new_exc activate_mm switch_mm_irqs_off switch_mmu_context switch_slb /* * This invalidates all * the entries in the HW * and setup the new HW * SLB entries as per the * preload cache. */ context_switch sched_migrate_task migrates process P to cpu-1 Process swapper/0 context switch (to process P) (uses mm_struct of Process P) switch_mm_irqs_off() switch_slb load_slb++ /* * load_slb becomes 0 here * and

Засегнати продукти

  • Linux Linux: 5434ae74629af58ad0fc27143a9ea435f7734410 преди 01324c0328181b94cf390bda22ff91c75126ea57; 5434ae74629af58ad0fc27143a9ea435f7734410 преди 2e9a95d60f1df7b57618fd5ef057aef331575bd2; 5434ae74629af58ad0fc27143a9ea435f7734410 преди c9f865022a1823d814032a09906e91e4701a35fc; 5434ae74629af58ad0fc27143a9ea435f7734410 преди b13a3dbfa196af68eae2031f209743735ad416bf; 5434ae74629af58ad0fc27143a9ea435f7734410 преди 895123c309a34d2cfccf7812b41e17261a3a6f37; 5434ae74629af58ad0fc27143a9ea435f7734410 преди 4ae1e46d8a290319f33f71a2710a1382ba5431e8; 5434ae74629af58ad0fc27143a9ea435f7734410 преди 00312419f0863964625d6dcda8183f96849412c6
  • Linux Linux: 4.20; преди 4.20; 5.10.248 до 5.10.*; 5.15.198 до 5.15.*; 6.1.160 до 6.1.*; 6.6.120 до 6.6.*; 6.12.64 до 6.12.*; 6.18.4 до 6.18.*; от 6.19 нататък

Вид слабост

История

  • 13 януари 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2025-71078: Linux, състезание за ресурс | freedomonline.bg