Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock When cleaning up peer group ids in the failure path we need to make sure to hold on to the namespace lock. Otherwise another thread might just turn the mount from a shared into a non-shared mount concurrently. A race condition was found in the Linux kernel’s filesystem mount namespace handling. When cleaning up peer group IDs in an error path, the code fails to hold the namespace lock. This allows another thread to concurrently change a mount from shared to non-shared, potentially causing inconsistent mount propagation state or other undefined behavior.Details
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Amazon Linux 2023 | Planned | — |