Description

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

Related CPE's

o

linux

linux_kernel

6

o

debian

debian_linux

10.0

Vulnerable

o

netapp

a700s_firmware

-

Vulnerable

h

netapp

a700s

-

o

netapp

8300_firmware

-

Vulnerable

h

netapp

8300

-

o

netapp

8700_firmware

-

Vulnerable

h

netapp

8700

-

o

netapp

a400_firmware

-

Vulnerable

h

netapp

a400

-

o

netapp

c400_firmware

-

Vulnerable

h

netapp

c400

-

o

netapp

h300s_firmware

-

Vulnerable

h

netapp

h300s

-

o

netapp

h500s_firmware

-

Vulnerable

h

netapp

h500s

-

o

netapp

h700s_firmware

-

Vulnerable

h

netapp

h700s

-

o

netapp

h410s_firmware

-

Vulnerable

h

netapp

h410s

-

o

netapp

h410c_firmware

-

Vulnerable

h

netapp

h410c

-

References

https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=7c4a5b89a0b5a57a64b601775b296abf77a9fe97

Mailing ListPatch

https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html

Mailing List

https://security.netapp.com/advisory/ntap-20230511-0002/

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-843

[email protected]

Secondary
CWE-843

CVSS impact metrics

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-03-27T21:15:10.467

1 year ago

Last modified

2024-01-12T17:43:31.383

6 months ago