Fix reader locking when changing the sub buffer order

CVE-2024-50207

What is CVE-2024-50207?

A vulnerability in the Linux kernel's ring buffer management allows for potential memory access issues due to inadequate locking mechanisms during sub buffer updates. Specifically, the function responsible for adjusting the sub buffer order does not acquire exclusive access while modifying shared data structures. This flaw could lead to readers experiencing incorrect memory access, resulting in application crashes or undefined behavior. A fix has been implemented by introducing a reader lock during these updates, enhancing stability and protection against concurrent access problems.

References