[Devel] [PATCH RH7 0/2] Follow-up fixes for CVE-2020-8648

Evgenii Shatokhin eshatokhin at virtuozzo.com
Tue Oct 13 23:44:02 MSK 2020


It looks like the following two fixes from the mainline kernel are
required to prevent a potential deadlock. 

  commit 4b70dd57a15d2f4685ac6e38056bad93e81e982f
  Author: Jiri Slaby <jirislaby at kernel.org>
  Date: Fri Feb 28 12:54:05 2020 +0100

    vt: selection, push console lock down

  commit e8c75a30a23c6ba63f4ef6895cbf41fd42f21aa2
  Author: Jiri Slaby <jirislaby at kernel.org>
  Date: Fri Feb 28 12:54:06 2020 +0100

    vt: selection, push sel_lock up

The problem was introduced by the fix for CVE-2020-8648: 
commit 3bd8c9162241 "ms/vt: selection, close sel_buffer race" in
vzkernel.

I was unable to reproduce the problem in VZ7 though but the code does
look problematic without these fixes.

https://jira.sw.ru/browse/PSBM-121234

Signed-off-by: Evgenii Shatokhin <eshatokhin at virtuozzo.com>




More information about the Devel mailing list