2024-02-26 17:04:33 +00:00
{
"id" : "CVE-2024-26602" ,
"sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"published" : "2024-02-26T16:28:00.043" ,
2024-06-27 14:03:13 +00:00
"lastModified" : "2024-06-27T12:15:18.543" ,
2024-06-25 23:58:14 +00:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-02-26 17:04:33 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/membarrier: reduce the ability to hammer on sys_membarrier\n\nOn some systems, sys_membarrier can be very expensive, causing overall\nslowdowns for everything. So put a lock on the path in order to\nserialize the accesses to prevent the ability for this to be called at\ntoo high of a frequency and saturate the machine."
2024-04-04 08:46:00 +00:00
} ,
{
"lang" : "es" ,
"value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sched/membarrier: reduce la capacidad de martillar en sys_membarrier. En algunos sistemas, sys_membarrier puede ser muy costoso, provocando ralentizaciones generales en todo. Por lo tanto, bloquee la ruta para serializar los accesos y evitar que se llame a una frecuencia demasiado alta y sature la m\u00e1quina."
2024-02-26 17:04:33 +00:00
}
] ,
2024-04-17 20:03:32 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 5.5 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.14.0" ,
"versionEndExcluding" : "4.19.307" ,
"matchCriteriaId" : "9FB44AB1-5E85-4F3D-A1F0-9D8B40E4720D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.20.0" ,
"versionEndExcluding" : "5.4.269" ,
"matchCriteriaId" : "7D5435B8-EBFE-43EC-9043-6E38BC9C0695"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.5.0" ,
"versionEndExcluding" : "5.10.210" ,
"matchCriteriaId" : "B39742A2-A0C1-490C-95CC-FB78D6D70698"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.11.0" ,
"versionEndExcluding" : "5.15.149" ,
"matchCriteriaId" : "E6FB1C44-BEEE-4D31-AD44-E15806EA6249"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.16.0" ,
"versionEndExcluding" : "6.1.79" ,
"matchCriteriaId" : "3B0A907E-1010-4294-AEFE-0EB5684AF52C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.2.0" ,
"versionEndExcluding" : "6.6.18" ,
"matchCriteriaId" : "A5CC150E-F35C-4CF7-ADF5-422D32C511C2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.7.0" ,
"versionEndExcluding" : "6.7.6" ,
"matchCriteriaId" : "0C8D1FAD-4D5D-4A25-B058-2AD15082710E"
}
]
}
]
}
] ,
2024-02-26 17:04:33 +00:00
"references" : [
{
"url" : "https://git.kernel.org/stable/c/2441a64070b85c14eecc3728cc87e883f953f265" ,
2024-04-17 20:03:32 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-02-26 17:04:33 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/24ec7504a08a67247fbe798d1de995208a8c128a" ,
2024-04-17 20:03:32 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-02-26 17:04:33 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/3cd139875e9a7688b3fc715264032620812a5fa3" ,
2024-04-17 20:03:32 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-02-26 17:04:33 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/50fb4e17df319bb33be6f14e2a856950c1577dee" ,
2024-04-17 20:03:32 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-02-26 17:04:33 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/944d5fe50f3f03daacfea16300e656a1691c4a23" ,
2024-04-17 20:03:32 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-02-26 17:04:33 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/b6a2a9cbb67545c825ec95f06adb7ff300a2ad71" ,
2024-04-17 20:03:32 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-02-26 17:04:33 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/c5b2063c65d05e79fad8029324581d86cfba7eea" ,
2024-04-17 20:03:32 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-02-26 17:04:33 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/db896bbe4a9c67cee377e5f6a743350d3ae4acf6" ,
2024-04-17 20:03:32 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-06-25 23:58:14 +00:00
} ,
{
"url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" ,
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
2024-06-27 14:03:13 +00:00
} ,
{
"url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" ,
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
2024-02-26 17:04:33 +00:00
}
]
}