Riskcovery

CVE-2024-26686

fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

State
Published
Severity
Not scored
Published
Apr 3, 2024
Updated
May 11, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time and the process has NR_THREADS, it will spin with irqs disabled O(NR_CPUS * NR_THREADS) time.

Change do_task_stat() to use sig->stats_lock to gather the statistics outside of ->siglock protected section, in the likely case this code will run lockless.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4fe85bdaabd63f8f8579b24a10ed597c9c482164Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0c35d1914353799c54fa1843fe7dea6fcbcdbac5Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cf4b8c39b9a0bd81c47afc7ef62914a62dd5ec4dAffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3820b0fac7732a653bcc6f6ac20c1d72e697f8f6Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 27978243f165b44e342f28f449b91327944ea071Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7601df8031fd67310af891897ef6cc0df4209305Affected
LinuxLinux
  • 2.6.12Affected
  • before 2.6.12Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.82 through 6.1.*Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.7.6 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.