Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Chenxiaosong

Researcher fromHuawei
#50270of 53,630
4.7Total CVSS
Vulnerabilities · 1
PT-2022-7490
4.7
2022-02-22
Linux · Linux Kernel · CVE-2022-48931
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The vulnerability is related to a race condition in the configfs component of the Linux kernel. When `configfs register subsystem()` or `configfs unregister subsystem()` is executing `link group()` or `unlink group()`, it is possible that two processes add or delete list concurrently, leading to kernel panic. The issue arises from the incorrect synchronization of access to shared resources. To fix this, a mutex is added when calling `link group()` or `unlink group()`, but a special case is handled when the parent `configfs subsystem` is NULL for the root `config item`. A new mutex `configfs subsystem mutex` is created to address this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.