NetSight
IP …
high7.8

CVE-2024-46713

In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insu…

Impact

In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in the lock order comment the perf_event::mmap_mutex order was already wrong, that is, it nesting under mmap_lock is not new with this patch.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.1 before 5.10.226
from 5.11 before 5.15.167
from 5.16 before 6.1.110
from 6.2 before 6.6.51
from 6.7 before 6.10.10
Version 6.11

Weakness classification

CWE-787

References