In the Linux kernel, the following vulnerability has been resolved:
sched: Fix yet more sched_fork() races
Where commit 4ef0c5c6b5ba ("kernel/sched: Fix schedfork() access an invalid schedtask_group") fixed a fork race vs cgroup, it opened up a race vs syscalls by not placing the task on the runqueue before it gets exposed through the pidhash.
Commit 13765de8148f ("sched/fair: Fix fault in reweight_entity") is trying to fix a single instance of this, instead fix the whole class of issues, effectively reverting this commit.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48944.json"
}[
{
"target": {
"file": "kernel/sched/core.c",
"function": "__setscheduler_params"
},
"digest": {
"length": 424.0,
"function_hash": "334932874338844833987614538051468198556"
},
"deprecated": false,
"id": "CVE-2022-48944-1c53cf45",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_fork"
},
"digest": {
"length": 1155.0,
"function_hash": "149912623411399737404449539873891428081"
},
"deprecated": false,
"id": "CVE-2022-48944-311231e8",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_fork"
},
"digest": {
"length": 1155.0,
"function_hash": "149912623411399737404449539873891428081"
},
"deprecated": false,
"id": "CVE-2022-48944-3d104e82",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_init"
},
"digest": {
"length": 4186.0,
"function_hash": "22790462549638994260748879493068155990"
},
"deprecated": false,
"id": "CVE-2022-48944-47638a5b",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "set_load_weight"
},
"digest": {
"length": 519.0,
"function_hash": "284411625049648097458541531327221624236"
},
"deprecated": false,
"id": "CVE-2022-48944-565f5083",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "__setscheduler_params"
},
"digest": {
"length": 424.0,
"function_hash": "334932874338844833987614538051468198556"
},
"deprecated": false,
"id": "CVE-2022-48944-61843dbd",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "set_load_weight"
},
"digest": {
"length": 519.0,
"function_hash": "284411625049648097458541531327221624236"
},
"deprecated": false,
"id": "CVE-2022-48944-6e317118",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_init"
},
"digest": {
"length": 4299.0,
"function_hash": "214424140454230782008204810480186870398"
},
"deprecated": false,
"id": "CVE-2022-48944-71d19990",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Function"
},
{
"target": {
"file": "include/linux/sched/task.h"
},
"digest": {
"line_hashes": [
"29586622212814640268427832209163792339",
"102138554476803118502395683083808308946",
"175093244942312248036408422212108731824",
"10769898772784398141156641867472341567",
"124068537002304195947380946939912272426"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-736835ac",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Line"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_post_fork"
},
"digest": {
"length": 538.0,
"function_hash": "330150659240518789466926152958995622105"
},
"deprecated": false,
"id": "CVE-2022-48944-738d0ee3",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c"
},
"digest": {
"line_hashes": [
"259478399692027270753053430158704360841",
"114397685335976726906028689325941659030",
"7252376939263320971278960563681106819",
"275006680882514904912451746519374535080",
"24182100834465470096448799703008178224",
"64514922147130662589230895684989405044",
"304240253967206259677731526747479333409",
"83354118180835077649560822466684811010",
"254087214421985170618939308564586485748",
"174846677197839806847614374988706390867",
"58952643211964750317963968365645013361",
"171727480590815655461743961267722281199",
"194855085164827723718909919077564424561",
"74551967434049706954456342943823698563",
"22327970547888463283653518238616552084",
"327432282876660062157553932454696947645",
"133072560019595211497620569686874383002",
"6837885125152118897223230455443193283",
"266345233347875795119424273108515691968",
"41869604307097716530252955864413760787",
"19960018091331649625510333369450255440",
"34801954784921967874626276483773190478",
"95334909107528542224725237360363779461",
"241453314648182850603631503495144874315",
"180015414555595464869822566456021489446",
"77894280461472033019106502016669779791",
"133616992125790984995184651678309362338",
"100528566656763187774674665181719183136",
"195915059240030891702910714364998501170",
"84023118600583541614652789414512660935",
"114140261698382475068848239724925231730",
"91338304242449046776132713096368253831",
"232346790064637372844840512045172204256",
"209601685966354170752104957712470324027",
"190169189249533243982051840258397414478",
"256585039821493673984750229274117461519",
"69975773278193207045925220520235396853",
"296089068568975308783226998385321651166",
"132941153708645964183929560547970768670",
"304024238680718241984341322432215938479",
"202428032532167073283198362048160955823",
"150451061643918465688178605377806600401",
"150726128581361124259871726057298022091"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-7a0d5198",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Line"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "set_user_nice"
},
"digest": {
"length": 872.0,
"function_hash": "212044403735578083175836833107928816644"
},
"deprecated": false,
"id": "CVE-2022-48944-89ab7c06",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_init"
},
"digest": {
"length": 4171.0,
"function_hash": "149603231438536800887452335499746579816"
},
"deprecated": false,
"id": "CVE-2022-48944-96e8f875",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/fork.c"
},
"digest": {
"line_hashes": [
"208940782539942968297430446730765275740",
"282027505846649106609313785366274824723",
"261173596082802612058314851652552468629",
"235707683408145175593804199631268362074",
"50910366213951249134505730437733911807",
"58551511233191966724984505025988223607",
"239852892221193803608531400002369762360"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-984044a2",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Line"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "__setscheduler_params"
},
"digest": {
"length": 424.0,
"function_hash": "334932874338844833987614538051468198556"
},
"deprecated": false,
"id": "CVE-2022-48944-9ef24059",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Function"
},
{
"target": {
"file": "include/linux/sched/task.h"
},
"digest": {
"line_hashes": [
"29586622212814640268427832209163792339",
"102138554476803118502395683083808308946",
"175093244942312248036408422212108731824",
"10769898772784398141156641867472341567",
"124068537002304195947380946939912272426"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-a4bc65b4",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Line"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_post_fork"
},
"digest": {
"length": 538.0,
"function_hash": "330150659240518789466926152958995622105"
},
"deprecated": false,
"id": "CVE-2022-48944-a4c51fcb",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "set_load_weight"
},
"digest": {
"length": 519.0,
"function_hash": "284411625049648097458541531327221624236"
},
"deprecated": false,
"id": "CVE-2022-48944-b61a43f0",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c"
},
"digest": {
"line_hashes": [
"259478399692027270753053430158704360841",
"114397685335976726906028689325941659030",
"7252376939263320971278960563681106819",
"275006680882514904912451746519374535080",
"24182100834465470096448799703008178224",
"64514922147130662589230895684989405044",
"304240253967206259677731526747479333409",
"83354118180835077649560822466684811010",
"254087214421985170618939308564586485748",
"174846677197839806847614374988706390867",
"58952643211964750317963968365645013361",
"171727480590815655461743961267722281199",
"194855085164827723718909919077564424561",
"74551967434049706954456342943823698563",
"22327970547888463283653518238616552084",
"327432282876660062157553932454696947645",
"133072560019595211497620569686874383002",
"6837885125152118897223230455443193283",
"266345233347875795119424273108515691968",
"41869604307097716530252955864413760787",
"19960018091331649625510333369450255440",
"34801954784921967874626276483773190478",
"95334909107528542224725237360363779461",
"241453314648182850603631503495144874315",
"180015414555595464869822566456021489446",
"77894280461472033019106502016669779791",
"133616992125790984995184651678309362338",
"100528566656763187774674665181719183136",
"195915059240030891702910714364998501170",
"84023118600583541614652789414512660935",
"114140261698382475068848239724925231730",
"91338304242449046776132713096368253831",
"232346790064637372844840512045172204256",
"209601685966354170752104957712470324027",
"190169189249533243982051840258397414478",
"256585039821493673984750229274117461519",
"69975773278193207045925220520235396853",
"296089068568975308783226998385321651166",
"132941153708645964183929560547970768670",
"304024238680718241984341322432215938479",
"202428032532167073283198362048160955823",
"150451061643918465688178605377806600401",
"150726128581361124259871726057298022091"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-be4c8b93",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Line"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "set_user_nice"
},
"digest": {
"length": 872.0,
"function_hash": "212044403735578083175836833107928816644"
},
"deprecated": false,
"id": "CVE-2022-48944-c64054f4",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c"
},
"digest": {
"line_hashes": [
"259478399692027270753053430158704360841",
"114397685335976726906028689325941659030",
"7252376939263320971278960563681106819",
"275006680882514904912451746519374535080",
"24182100834465470096448799703008178224",
"64514922147130662589230895684989405044",
"304240253967206259677731526747479333409",
"83354118180835077649560822466684811010",
"254087214421985170618939308564586485748",
"174846677197839806847614374988706390867",
"58952643211964750317963968365645013361",
"171727480590815655461743961267722281199",
"194855085164827723718909919077564424561",
"74551967434049706954456342943823698563",
"22327970547888463283653518238616552084",
"327432282876660062157553932454696947645",
"133072560019595211497620569686874383002",
"6837885125152118897223230455443193283",
"266345233347875795119424273108515691968",
"41869604307097716530252955864413760787",
"19960018091331649625510333369450255440",
"34801954784921967874626276483773190478",
"95334909107528542224725237360363779461",
"241453314648182850603631503495144874315",
"180015414555595464869822566456021489446",
"77894280461472033019106502016669779791",
"133616992125790984995184651678309362338",
"100528566656763187774674665181719183136",
"195915059240030891702910714364998501170",
"84023118600583541614652789414512660935",
"114140261698382475068848239724925231730",
"91338304242449046776132713096368253831",
"232346790064637372844840512045172204256",
"209601685966354170752104957712470324027",
"190169189249533243982051840258397414478",
"256585039821493673984750229274117461519",
"69975773278193207045925220520235396853",
"296089068568975308783226998385321651166",
"132941153708645964183929560547970768670",
"304024238680718241984341322432215938479",
"202428032532167073283198362048160955823",
"150451061643918465688178605377806600401",
"121692995543144971108012061383209953810"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-d7b8e0fb",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Line"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "set_user_nice"
},
"digest": {
"length": 872.0,
"function_hash": "212044403735578083175836833107928816644"
},
"deprecated": false,
"id": "CVE-2022-48944-d9cfbc31",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Function"
},
{
"target": {
"file": "include/linux/sched/task.h"
},
"digest": {
"line_hashes": [
"29586622212814640268427832209163792339",
"102138554476803118502395683083808308946",
"175093244942312248036408422212108731824",
"10769898772784398141156641867472341567",
"292392239806390122867324481893212885204"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-da400103",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Line"
},
{
"target": {
"file": "kernel/fork.c"
},
"digest": {
"line_hashes": [
"208940782539942968297430446730765275740",
"282027505846649106609313785366274824723",
"261173596082802612058314851652552468629",
"207652273355322718690383982146438824654",
"85448922895512028947329199745932142259",
"58551511233191966724984505025988223607",
"239852892221193803608531400002369762360"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-deaf9dd7",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Line"
},
{
"target": {
"file": "kernel/fork.c",
"function": "copy_process"
},
"digest": {
"length": 11093.0,
"function_hash": "233865704127051089676415113731636427008"
},
"deprecated": false,
"id": "CVE-2022-48944-e56025fd",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/fork.c",
"function": "copy_process"
},
"digest": {
"length": 11167.0,
"function_hash": "38804754583177750297194512090672711485"
},
"deprecated": false,
"id": "CVE-2022-48944-e9052fc8",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1e8206582f9d680cff7d04828708c8b6ab32957",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_fork"
},
"digest": {
"length": 1155.0,
"function_hash": "149912623411399737404449539873891428081"
},
"deprecated": false,
"id": "CVE-2022-48944-eb443940",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/fork.c",
"function": "copy_process"
},
"digest": {
"length": 11093.0,
"function_hash": "233865704127051089676415113731636427008"
},
"deprecated": false,
"id": "CVE-2022-48944-eba6194e",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/sched/core.c",
"function": "sched_post_fork"
},
"digest": {
"length": 538.0,
"function_hash": "330150659240518789466926152958995622105"
},
"deprecated": false,
"id": "CVE-2022-48944-f2dbb7f3",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3411613611a5cddf7e80908010dc87cb527dd13b",
"signature_type": "Function"
},
{
"target": {
"file": "kernel/fork.c"
},
"digest": {
"line_hashes": [
"208940782539942968297430446730765275740",
"282027505846649106609313785366274824723",
"261173596082802612058314851652552468629",
"207652273355322718690383982146438824654",
"85448922895512028947329199745932142259",
"58551511233191966724984505025988223607",
"239852892221193803608531400002369762360"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-48944-f2fe34e9",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c65cfd89cef669d90c59f3bf150af6458137a04f",
"signature_type": "Line"
}
]