CVE-2025-38704
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/09/2025
Last modified:
05/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
rcu/nocb: Fix possible invalid rdp&#39;s->nocb_cb_kthread pointer access<br />
<br />
In the preparation stage of CPU online, if the corresponding<br />
the rdp&#39;s->nocb_cb_kthread does not exist, will be created,<br />
there is a situation where the rdp&#39;s rcuop kthreads creation fails,<br />
and then de-offload this CPU&#39;s rdp, does not assign this CPU&#39;s<br />
rdp->nocb_cb_kthread pointer, but this rdp&#39;s->nocb_gp_rdp and<br />
rdp&#39;s->rdp_gp->nocb_gp_kthread is still valid.<br />
<br />
This will cause the subsequent re-offload operation of this offline<br />
CPU, which will pass the conditional check and the kthread_unpark()<br />
will access invalid rdp&#39;s->nocb_cb_kthread pointer.<br />
<br />
This commit therefore use rdp&#39;s->nocb_gp_kthread instead of<br />
rdp_gp&#39;s->nocb_gp_kthread for safety check.