Threats tagged 'ghsa-jq3v-ccgp-cvrg'

CVE-2024-50138 is a medium severity vulnerability in the Linux kernel involving the use of spinlock_t in the BPF ring buffer code. The function __bpf_ringbuf_reserve is called from a tracepoint context where preemption is disabled, and using spinlock_t here can cause a "sleep in atomic" warning in the real-time (RT) kernel variant. The issue is resolved by switching to raw_spinlock_t to avoid this error.