Към съдържанието
Търсене

CVE-2026-23374: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: blktrace: fix __this_cpu_read/write in preemptible context tracing_record_cmdline() internally uses __this_cpu_read() and __this_cpu_write() on the per-CPU variable trace_cmdline_save, and trace_save_cmdline() explicitly asserts preemption is disabled via lockdep_assert_preemption_disabled(). These operations are only safe when preemption is off, as they were designed to be called from the scheduler context (probe_wakeup_sched_switch() / probe_wakeup()). __blk_add_trace() was calling tracing_record_cmdline(current) early in the blk_tracer path, before ring buffer reservation, from process context where preemption is fully enabled. This triggers the following using blktests/blktrace/002: blktrace/002 (blktrace ftrace corruption with sysfs trace) [failed] runtime 0.367s ... 0.437s something found in dmesg: [ 81.211018] run blktests blktrace/002 at 2026-02-25 22:24:33 [ 81.239580] null_blk: disk nullb1 created [ 81.357294] BUG: using __this_cpu_read() in preemptible [00000000] code: dd/2516 [ 81.362842] caller is tracing_record_cmdline+0x10/0x40 [ 81.362872] CPU: 16 UID: 0 PID: 2516 Comm: dd Tainted: G N 7.0.0-rc1lblk+ #84 PREEMPT(full) [ 81.362877] Tainted: [N]=TEST [ 81.362878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014 [ 81.362881] Call Trace: [ 81.362884] <TASK> [ 81.362886] dump_stack_lvl+0x8d/0xb0 ... (See '/mnt/sda/blktests/results/nodev/blktrace/002.dmesg' for the entire message) [ 81.211018] run blktests blktrace/002 at 2026-02-25 22:24:33 [ 81.239580] null_blk: disk nullb1 created [ 81.357294] BUG: using __this_cpu_read() in preemptible [00000000] code: dd/2516 [ 81.362842] caller is tracing_record_cmdline+0x10/0x40 [ 81.362872] CPU: 16 UID: 0 PID: 2516 Comm: dd Tainted: G N 7.0.0-rc1lblk+ #

    Засегнати продукти

    • Linux Linux: 7ffbd48d5cab22bcd1120eb2349db1319e2d827a преди 37e86414cc9989344de82d2a658a095f8d5e71d9; 7ffbd48d5cab22bcd1120eb2349db1319e2d827a преди aaba6ee63ba65b026401c94e2dd16b9f6e895934; 7ffbd48d5cab22bcd1120eb2349db1319e2d827a преди e5584932ac1dacc182c430d09e2b5490d1d4372b; 7ffbd48d5cab22bcd1120eb2349db1319e2d827a преди 6e5c3ddf17a2cb1722301bbbd15655fcc20ed1ce; 7ffbd48d5cab22bcd1120eb2349db1319e2d827a преди 59efa088752b1c380a0475974679850cc8aef907; 7ffbd48d5cab22bcd1120eb2349db1319e2d827a преди da46b5dfef48658d03347cda21532bcdbb521e67
    • Linux Linux: 3.8; преди 3.8; 6.1.191 до 6.1.*; 6.6.136 до 6.6.*; 6.12.82 до 6.12.*; 6.18.57 до 6.18.*; 6.19.7 до 6.19.*; от 7.0 нататък

    История

    • 25 март 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-23374: Linux | freedomonline.bg