title: sched/membarrier: reduce the ability to hammer on sys_membarrier
description: In the Linux kernel, the following vulnerability has been resolved:
sched/membarrier: reduce the ability to hammer on sys_membarrier
On some systems, sys_membarrier can be very expensive, causing overall
slowdowns for everything.  So put a lock on the path in order to
serialize the accesses to prevent the ability for this to be called at
too high of a frequency and saturate the machine.
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 22e4ebb97582, lessThan: 3cd139875e9a, status: affected, versionType: git
version: 22e4ebb97582, lessThan: 2441a64070b8, status: affected, versionType: git
version: 22e4ebb97582, lessThan: db896bbe4a9c, status: affected, versionType: git
version: 22e4ebb97582, lessThan: 50fb4e17df31, status: affected, versionType: git
version: 22e4ebb97582, lessThan: 24ec7504a08a, status: affected, versionType: git
version: 22e4ebb97582, lessThan: b6a2a9cbb675, status: affected, versionType: git
version: 22e4ebb97582, lessThan: c5b2063c65d0, status: affected, versionType: git
version: 22e4ebb97582, lessThan: 944d5fe50f3f, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 4.14, status: affected
version: 0, lessThan: 4.14, status: unaffected, versionType: custom
version: 4.19.307, lessThanOrEqual: 4.19.*, status: unaffected, versionType: custom
version: 5.4.269, lessThanOrEqual: 5.4.*, status: unaffected, versionType: custom
version: 5.10.210, lessThanOrEqual: 5.10.*, status: unaffected, versionType: custom
version: 5.15.149, lessThanOrEqual: 5.15.*, status: unaffected, versionType: custom
version: 6.1.79, lessThanOrEqual: 6.1.*, status: unaffected, versionType: custom
version: 6.6.18, lessThanOrEqual: 6.6.*, status: unaffected, versionType: custom
version: 6.7.6, lessThanOrEqual: 6.7.*, status: unaffected, versionType: custom
version: 6.8, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
