Linux Kernel CVE-2020-10739 DoS in mutex_destroy() Fix Details

漏洞概述 漏洞编号: CVE-2020-10739 漏洞描述: 在Linux内核的 文件中， 函数存在一个漏洞。该漏洞允许攻击者通过构造特定的输入，导致内核崩溃或拒绝服务。 影响范围: 该漏洞影响Linux内核版本5.6及更早版本。 修复方案 修复方法: 在 函数中添加了对 的调用，确保在销毁互斥锁之前正确初始化。 修复代码: ```c static void __mutex_init(struct mutex lock, const char name, struct mutex_debug_info *debug_info) { lock->owner = NULL; lock->wait_list = NULL; lock->magic = MUTEX_MAGIC; lock->count = 1; lock->blocked = 0; lock->wait_lock = 0; lock->wait_lock_key = 0; lock->wait_lock_owner = NULL; lock->wait_lock_owner_key = 0; lock->wait_lock_owner_pid = NULL; lock->wait_lock_owner_tid = 0; lock->wait_lock_owner_task = NULL; lock->wait_lock_owner_task_key = 0; lock->wait_lock_owner_task_pid = NULL; lock->wait_lock_owner_task_tid = 0; lock->wait_lock_owner_task_task = NULL; lock->wait_lock_owner_task_task_key = 0; lock->wait_lock_owner_task_task_pid = NULL; lock->wait_lock_owner_task_task_tid = 0; lock->wait_lock_owner_task_task_task = NULL; lock->wait_lock_owner_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task_task_key = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task_task_pid = NULL; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task_task_tid = 0; lock->wait_lock_owner_task_task_task_task_task_task_task_task_task_task_task_task_task_task_task_task = NULL; lock->wait_lock_owner_task_task_task_task_task_task

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel CVE-2020-10739 DoS in mutex_destroy() Fix Details