CVE-2022-48939

bpf: Add schedule points in batch ops

State
Published
Severity
Not scored
Published
Aug 22, 2024
Updated
May 11, 2026
Reserved
Aug 22, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Add schedule points in batch ops

syzbot reported various soft lockups caused by bpf batch operations.

INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcu_barrier

Nothing prevents batch ops to process huge amount of data, we need to add schedule points in them.

Note that maybe_wait_bpf_programs(map) calls from generic_map_delete_batch() can be factorized by moving the call after the loop.

This will be done later in -next tree once we get this fix merged, unless there is strong opinion doing this optimization sooner.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cb4d03ab499d4c040f4ab6fd4389d2b49f42b5a5 to before 7ef94bfb08fb9e73defafbd5ddef6b5a0e2ee12bAffected
  • cb4d03ab499d4c040f4ab6fd4389d2b49f42b5a5 to before 8628f489b749a4f9767991631921dbe3fbcdc784Affected
  • cb4d03ab499d4c040f4ab6fd4389d2b49f42b5a5 to before 7e8099967d0e3ff9d1ae043e80b27fbe46c08417Affected
  • cb4d03ab499d4c040f4ab6fd4389d2b49f42b5a5 to before 75134f16e7dd0007aa474b281935c5f42e79f2c8Affected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 5.10.103 through 5.10.*Not affected
  • 5.15.26 through 5.15.*Not affected
  • 5.16.12 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.