CVE-2025-38704
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/09/2025
Última modificación:
05/09/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
rcu/nocb: Fix possible invalid rdp&#39;s->nocb_cb_kthread pointer access<br />
<br />
In the preparation stage of CPU online, if the corresponding<br />
the rdp&#39;s->nocb_cb_kthread does not exist, will be created,<br />
there is a situation where the rdp&#39;s rcuop kthreads creation fails,<br />
and then de-offload this CPU&#39;s rdp, does not assign this CPU&#39;s<br />
rdp->nocb_cb_kthread pointer, but this rdp&#39;s->nocb_gp_rdp and<br />
rdp&#39;s->rdp_gp->nocb_gp_kthread is still valid.<br />
<br />
This will cause the subsequent re-offload operation of this offline<br />
CPU, which will pass the conditional check and the kthread_unpark()<br />
will access invalid rdp&#39;s->nocb_cb_kthread pointer.<br />
<br />
This commit therefore use rdp&#39;s->nocb_gp_kthread instead of<br />
rdp_gp&#39;s->nocb_gp_kthread for safety check.