CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel, specifically the handling of process access checks via the ptrace mechanism, which can lead to race conditions when accessing task information. This flaw could allow unauthorized access to process data, potentially compromising system integrity and confidentiality. Organizations using Linux should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (FD links) proc_pid_get_link() and proc_pid_readlink() currently look up the task from the pid once, then do the ptrace access check on that task, then look up the task from the pid a second time to do the actual access. That's racy in several ways. To fix it, pass the task to the ->proc_get_link() handler, and instead of proc_fd_access_allowed(), introduce a new helper call_proc_get_link() that looks up and locks the task, does the access check, and calls ->proc_get_link().