Threats tagged 'ghsa-mgx5-jrhq-g7rg'

CVE-2024-26686 is a medium-severity vulnerability in the Linux kernel's fs/proc subsystem where the do_task_stat function improperly handles locking, leading to a potential hard lockup. The issue arises when multiple CPU threads simultaneously call do_task_stat on a process with many threads, causing excessive spinning with interrupts disabled. The vulnerability is addressed by changing do_task_stat to use sig->stats_lock for gathering thread and child statistics outside the siglock-protected section, reducing the risk of lockups.