Project

General

Profile

Actions

Bug #14424

closed

tmpfs can be induced to deadlock

Added by Dan McDonald almost 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Immediate
Assignee:
Category:
kernel
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Hard
Tags:
Gerrit CR:
External Bug:

Description

Security researcher Hans Christian Woithe reported CVE-2021-43395 to both us and Oracle. He discovered conditions where any arbitrary user could induce tmpfs to panic with deadlock-detection. This bug tracks our fix for this problem.

Tested using Hans's PoC, which now does not induce a panic. Tested on OmniOS both bare-metal (by Andy Fiddaman) and VM (by Dan McD.). Tested on SmartOS bare-metal (by Dan McD.).

Actions

Also available in: Atom PDF