debugobjects: Do not fill_pool() if pi_blocked_on
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.1%
exploitation probability
0.1%top 97% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
debugobjects: Do not fill_pool() if pi_blocked_on
On RT enabled kernels, fill_pool() ends up calling rtlock_lock(), which
asserts if current::pi_blocked_on is set, because a task can obviously only
block on one lock as otherwise the priority inheritenace chain gets
corrupted.
Prevent this by expanding the conditional to take current::pi_blocked_on
into account.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/33bee10644f8fff3b1a0187ad5ad34513e5e8e72https://git.kernel.org/stable/c/3a408cae608d9c075dd3a9e5cfc03b3cb0726863https://git.kernel.org/stable/c/3f6a3b24ab7b9d51f6f4778254bef0e5847beb55https://git.kernel.org/stable/c/5f41161059fd0f1bbf18c90f3180e38cc45a14ebhttps://git.kernel.org/stable/c/8a680d54f1adf3e3aa815578684556716fda6f0chttps://git.kernel.org/stable/c/a3383df76f0d7a597066df018409eb9e5e698064