PT-2021-24422 · Tableflip · Tableflip
Published
2021-05-21
·
Updated
2021-05-21
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
tableflip versions prior to 1.2.2
Description:
The issue affects processes using tableflip, potentially causing hung goroutines in the parent process after a failed upgrade. This occurs due to the Go runtime's behavior with O NONBLOCK, specifically when
exec.Cmd.Start() is called, leading to the disabling of the runtime poller and the clearing of O NONBLOCK from the underlying file descriptor. As a result, goroutines relying on deadlines or interruption via Close() may become stuck in read or accept-like syscalls. Although this problem is considered rare and has not been experienced in production, it can still cause issues.Recommendations:
For versions prior to 1.2.2, update to version 1.2.2 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tableflip