| 2015-12-16 14:18:43 |
Colin Ian King |
bug |
|
|
added bug |
| 2015-12-16 14:18:43 |
Colin Ian King |
attachment added |
|
C bug reproducer https://bugs.launchpad.net/bugs/1526811/+attachment/4535677/+files/oops-procfs.c |
|
| 2015-12-16 16:41:36 |
Colin Ian King |
information type |
Private Security |
Public |
|
| 2015-12-17 23:06:03 |
Colin Ian King |
description |
[SRU Justification][Wily] + [Xenial]
While stress testing with the stress-ng procfs stressor I hit a walker list bug. This has been recently fixed by Herbert Xu in commit:
The commit ba7c95ea3870fe7b847466d39a049ab6f156aa2c ("rhashtable: Fix sleeping inside RCU critical section in walk_stop") introduced a new spinlock for the walker list. However, it did not convert all existing users of the list over to the new spin lock. Some continued to use the old mutex for this purpose. This obviously led to corruption of the list.
[Fix]
See: http://marc.info/?l=linux-netdev&m=145027458131396&w=2
Probably will wait until this officially lands in 4.4 or 4.5.
[Testcase]
Run multiple instances of the attached code on a multicore system. Alternatively, run stress-ng --procfs 0 on a multi-core system
Fix will stop the above code corrupting the list and crashing. |
[SRU Justification][Wily] + [Xenial]
While stress testing with the stress-ng procfs stressor I hit a walker list bug. This has been recently fixed by Herbert Xu in commit:
The commit ba7c95ea3870fe7b847466d39a049ab6f156aa2c ("rhashtable: Fix sleeping inside RCU critical section in walk_stop") introduced a new spinlock for the walker list. However, it did not convert all existing users of the list over to the new spin lock. Some continued to use the old mutex for this purpose. This obviously led to corruption of the list.
[Fix]
Clean upstream cherry pick, commit c6ff5268293ef98e48a99597e765ffc417e39fa5
Will land in Xenial automatically (4.4)
[Testcase]
Run multiple instances of the attached code on a multicore system. Alternatively, run stress-ng --procfs 0 on a multi-core system
Fix will stop the above code corrupting the list and crashing. |
|
| 2015-12-18 01:10:51 |
Tim Gardner |
nominated for series |
|
Ubuntu Xenial |
|
| 2015-12-18 01:10:51 |
Tim Gardner |
bug task added |
|
linux (Ubuntu Xenial) |
|
| 2015-12-18 01:10:51 |
Tim Gardner |
nominated for series |
|
Ubuntu Wily |
|
| 2015-12-18 01:10:51 |
Tim Gardner |
bug task added |
|
linux (Ubuntu Wily) |
|
| 2015-12-18 01:11:25 |
Tim Gardner |
linux (Ubuntu Wily): status |
New |
In Progress |
|
| 2015-12-18 01:11:25 |
Tim Gardner |
linux (Ubuntu Wily): assignee |
|
Colin Ian King (colin-king) |
|
| 2015-12-18 01:11:37 |
Tim Gardner |
linux (Ubuntu Xenial): status |
In Progress |
Fix Committed |
|
| 2016-01-06 14:56:22 |
Brad Figg |
linux (Ubuntu Wily): status |
In Progress |
Fix Committed |
|
| 2016-01-13 23:30:07 |
Luis Henriques |
tags |
|
verification-needed-wily |
|
| 2016-01-14 11:56:40 |
Colin Ian King |
tags |
verification-needed-wily |
verification-done-wily |
|
| 2016-01-18 13:55:10 |
Colin Ian King |
bug watch added |
|
http://bugzilla.kernel.org/show_bug.cgi?id=107181 |
|
| 2016-01-18 13:55:10 |
Colin Ian King |
bug task added |
|
linux |
|
| 2016-01-19 15:21:14 |
Launchpad Janitor |
linux (Ubuntu Xenial): status |
Fix Committed |
Fix Released |
|
| 2016-01-19 15:21:14 |
Launchpad Janitor |
cve linked |
|
2015-8660 |
|
| 2016-02-02 11:49:04 |
Andy Whitcroft |
linux (Ubuntu Wily): status |
Fix Committed |
Fix Released |
|
| 2016-02-24 13:07:51 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-branches/ubuntu/trusty/linux-lts-wily/trusty-proposed |
|
