Linux Kernel Vulnerability in DLM Low Communications Handling

CVE-2022-50373

What is CVE-2022-50373?

A race condition in the Linux kernel's DLM (Distributed Lock Manager) low communications handling can result in garbage values in message indices during processing. This vulnerability arises between the execution of queue_work and srcu_read_unlock functions, potentially leading to inconsistent data states. The issue has been addressed by introducing an additional reference count mechanism, ensuring that proper synchronization is maintained in the message handling process.

References