CVE-2022-48939

LOW EPSS 10.1%
Published Aug 22, 20241y ago · Modified Jun 17, 20261w ago
3.3 CVSS 3.1
Low
Find Similar
Published Aug 22, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcu_barrier Nothing prevents batch ops to process huge amount of data, we need to add schedule points in them. Note that maybe_wait_bpf_programs(map) calls from generic_map_delete_batch() can be factorized by moving the call after the loop. This will be done later in -next tree once we get this fix merged, unless there is strong opinion doing this optimization sooner.

CVSS Details

Base Score
3.3
Exploitability
1.8
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability Low

Threat Intelligence

EPSS Exploit Probability
10.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-834

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥5.6  –  <5.10.103
linuxlinux_kernel*≥5.11  –  <5.15.26
linuxlinux_kernel*≥5.16  –  <5.16.12

References 4

  • git.kernel.org https://git.kernel.org/stable/c/75134f16e7dd0007aa474b281935c5f42e79f2c8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7e8099967d0e3ff9d1ae043e80b27fbe46c08417
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7ef94bfb08fb9e73defafbd5ddef6b5a0e2ee12b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8628f489b749a4f9767991631921dbe3fbcdc784
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/75134f16e7dd0007aa474b281935c5f42e79f2c8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7e8099967d0e3ff9d1ae043e80b27fbe46c08417
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7ef94bfb08fb9e73defafbd5ddef6b5a0e2ee12b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8628f489b749a4f9767991631921dbe3fbcdc784
    Patch