CVE-2022-50193
Published: 06/18/2025 11:15:49
In the Linux kernel, the following vulnerability has been resolved:
erofs: wake up all waiters after z_erofs_lzma_head ready
When the user mounts the erofs second times, the decompression thread
may hung. The problem happens due to a sequence of steps like the
following:
1) Task A called z_erofs_load_lzma_config which obtain all of the node
from the z_erofs_lzma_head.
2) At this time, task B called the z_erofs_lzma_decompress and wanted to
get a node. But the z_erofs_lzma_head was empty, the Task B had to
sleep.
3) Task A release nodes and push nodes into the z_erofs_lzma_head. But
task B was still sleeping.
One example report when the hung happens:
task:kworker/u3:1 state:D stack:14384 pid: 86 ppid: 2 flags:0x00004000
Workqueue: erofs_unzipd z_erofs_decompressqueue_work
Call Trace:
__schedule+0x281/0x760
schedule+0x49/0xb0
z_erofs_lzma_decompress+0x4bc/0x580
? cpu_core_flags+0x10/0x10
z_erofs_decompress_pcluster+0x49b/0xba0
? __update_load_avg_se+0x2b0/0x330
? __update_load_avg_se+0x2b0/0x330
? update_load_avg+0x5f/0x690
? update_load_avg+0x5f/0x690
? set_next_entity+0xbd/0x110
? _raw_spin_unlock+0xd/0x20
z_erofs_decompress_queue.isra.0+0x2e/0x50
z_erofs_decompressqueue_work+0x30/0x60
process_one_work+0x1d3/0x3a0
worker_thread+0x45/0x3a0
? process_one_work+0x3a0/0x3a0
kthread+0xe2/0x110
? kthread_complete_and_exit+0x20/0x20
ret_from_fork+0x22/0x30
Unknown
CVSS v2:
CVSS v2:
Status
DocFilters Release | Package | State | Justification | Comment |
---|---|---|---|---|
22.3 | lzma (17.01) | Needs Triage | ||
22.2 | lzma (17.01) | Needs Triage | ||
22.1 | lzma (17.01) | Needs Triage | ||
21.11.1 | lzma (17.01) | Needs Triage | ||
21.11 | lzma (17.01) | Needs Triage | ||
21.8.1 | lzma (17.01) | Needs Triage | ||
21.8 | lzma (17.01) | Needs Triage | ||
21.5.1 | lzma (17.01) | Needs Triage | ||
21.5.0 | lzma (17.01) | Needs Triage | ||
21.2.0 | lzma (17.01) | Needs Triage | ||
11.4.20 | lzma (17.01) | Needs Triage | ||
11.4.19.3667 | lzma (17.01) | Needs Triage | ||
11.4.18.3599 | lzma (17.01) | Needs Triage | ||
11.4.17 | lzma (17.01) | Needs Triage | ||
11.4.16.3445 | lzma (17.01) | Needs Triage | ||
11.4.15.3368 | lzma (17.01) | Needs Triage | ||
11.4.14.3263 | lzma (17.01) | Needs Triage | ||
11.4.13.3179 | lzma (17.01) | Needs Triage | ||
11.4.12.3054 | lzma (17.01) | Needs Triage | ||
11.4.11.3040 | lzma (17.01) | Needs Triage | ||
11.4.11.2990 | lzma (17.01) | Needs Triage | ||
11.4.10.2934 | lzma (17.01) | Needs Triage | ||
11.4.9.2878 | lzma (17.01) | Needs Triage | ||
11.4.8.2822 | lzma (17.01) | Needs Triage |