CVE-2022-48671

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-48671
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48671.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48671
Downstream
Related
Published
2024-05-03T14:50:23Z
Modified
2026-08-12T03:30:43Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
Details

In the Linux kernel, the following vulnerability has been resolved:

cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

syzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at cpuset_attach() [1], for commit 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") missed that cpuset_attach() is also called from cgroup_attach_task_all(). Add cpus_read_lock() like what cgroup_procs_write_start() does.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48671.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e446300968c6bd25d9cd6c33b9600780a39b3975
Fixed
321488cfac7d0eb6d97de467015ff754f85813ff
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
59c6902a96b4439e07c25ef86a4593bea5481c3b
Fixed
07191f984842d50020789ff14c75da436a7f46a9
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dee1e2b18cf5426eed985512ccc6636ec69dbdd6
Fixed
9f267393b036f1470fb12fb892d59e7ff8aeb58d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3bf4bf54069f9b62a54988e5d085023c17a66c90
Fixed
5db17805b6ba4c34dab303f49aea3562fc25af75
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c0deb027c99c099aa6b831e326bfba802b25e774
Fixed
99bc25748e394d17f9e8b10cc7f273b8e64c1c7e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4f7e7236435ca0abe005c674ebd6892c6e83aeb3
Fixed
43626dade36fa74d3329046f4ae2d7fdefe401c6

Affected versions

v5.*
v5.10.143
v5.10.144
v5.15.68
v5.15.69
v5.19.10
v5.19.9
v5.4.213
v5.4.214

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48671.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.4.213
Fixed
5.4.215
Type
ECOSYSTEM
Events
Introduced
5.10.143
Fixed
5.10.145
Type
ECOSYSTEM
Events
Introduced
5.15.68
Fixed
5.15.70
Type
ECOSYSTEM
Events
Introduced
5.19.9
Fixed
5.19.11

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48671.json"