CVE-2024-53052— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于缺少NOWAIT检查。
可能的 ATT&CK 技术 1 AI
T1548.001 · Setuid and Setgid影响版本矩阵 14
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 2b188cc1bb857a9d4701ae59aa7768b5124e262e< 485d9232112b17f389b29497ff41b97b3189546b |
affected |
2b188cc1bb857a9d4701ae59aa7768b5124e262e< 4e24041ba86d50aaa4c792ae2c88ed01b3d96243 |
affected | ||
2b188cc1bb857a9d4701ae59aa7768b5124e262e< 9e8debb8e51354b201db494689198078ec2c1e75 |
affected | ||
2b188cc1bb857a9d4701ae59aa7768b5124e262e< 003d2996964c03dfd34860500428f4cdf1f5879e |
affected | ||
2b188cc1bb857a9d4701ae59aa7768b5124e262e< 26b8c48f369b7591f5679e0b90612f4862a32929 |
affected | ||
2b188cc1bb857a9d4701ae59aa7768b5124e262e< 1d60d74e852647255bd8e76f5a22dc42531e4389 |
affected | ||
5.1 |
affected | ||
< 5.1 |
unaffected | ||
| … +6 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2024-53052 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
When io_uring starts a write, it'll call kiocb_start_write() to bump the
super block rwsem, preventing any freezes from happening while that
write is in-flight. The freeze side will grab that rwsem for writing,
excluding any new writers from happening and waiting for existing writes
to finish. But io_uring unconditionally uses kiocb_start_write(), which
will block if someone is currently attempting to freeze the mount point.
This causes a deadlock where freeze is waiting for previous writes to
complete, but the previous writes cannot complete, as the task that is
supposed to complete them is blocked waiting on starting a new write.
This results in the following stuck trace showing that dependency with
the write blocked starting a new write:
task:fio state:D stack:0 pid:886 tgid:886 ppid:876
Call trace:
__switch_to+0x1d8/0x348
__schedule+0x8e8/0x2248
schedule+0x110/0x3f0
percpu_rwsem_wait+0x1e8/0x3f8
__percpu_down_read+0xe8/0x500
io_write+0xbb8/0xff8
io_issue_sqe+0x10c/0x1020
io_submit_sqes+0x614/0x2110
__arm64_sys_io_uring_enter+0x524/0x1038
invoke_syscall+0x74/0x268
el0_svc_common.constprop.0+0x160/0x238
do_el0_svc+0x44/0x60
el0_svc+0x44/0xb0
el0t_64_sync_handler+0x118/0x128
el0t_64_sync+0x168/0x170
INFO: task fsfreeze:7364 blocked for more than 15 seconds.
Not tainted 6.12.0-rc5-00063-g76aaf945701c #7963
with the attempting freezer stuck trying to grab the rwsem:
task:fsfreeze state:D stack:0 pid:7364 tgid:7364 ppid:995
Call trace:
__switch_to+0x1d8/0x348
__schedule+0x8e8/0x2248
schedule+0x110/0x3f0
percpu_down_write+0x2b0/0x680
freeze_super+0x248/0x8a8
do_vfs_ioctl+0x149c/0x1b18
__arm64_sys_ioctl+0xd0/0x1a0
invoke_syscall+0x74/0x268
el0_svc_common.constprop.0+0x160/0x238
do_el0_svc+0x44/0x60
el0_svc+0x44/0xb0
el0t_64_sync_handler+0x118/0x128
el0t_64_sync+0x168/0x170
Fix this by having the io_uring side honor IOCB_NOWAIT, and only attempt a
blocking grab of the super block rwsem if it isn't set. For normal issue
where IOCB_NOWAIT would always be set, this returns -EAGAIN which will
have io_uring core issue a blocking attempt of the write. That will in
turn also get completions run, ensuring forward progress.
Since freezing requires CAP_SYS_ADMIN in the first place, this isn't
something that can be triggered by a regular user.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于缺少NOWAIT检查。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2024-53052 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2024-53052 的情报信息
请登录查看更多情报信息。
CVE-2024-53052 补丁与修复 (4)
同批安全公告 · Linux · 2024-11-19 · 共 88 条
| CVE-2024-50283 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-50286 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-50276 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-53066 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-53058 | 9.4 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-53082 | 8.4 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-50299 | 8.2 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-50293 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-50291 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-50294 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-53044 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-50288 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-53063 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-53088 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-53080 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-53079 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-53076 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-50264 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-50301 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-50300 | 7.8 HIGH | Linux kernel 安全漏洞 |
显示前 20 条，共 88 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-53052
暂无评论