[Bug nptl/34542] New: pthread_mutex_timedlock does not revert robust list head update on failure

https://sourceware.org/bugzilla/show_bug.cgi?id=34542

            Bug ID: 34542
           Summary: pthread_mutex_timedlock does not revert robust list
                    head update on failure
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: nptl
          Assignee: unassigned at sourceware dot org
          Reporter: fweimer at redhat dot com
                CC: drepper.fsp at gmail dot com
  Target Milestone: ---
             Flags: security-

Created attachment 16954
  --> https://sourceware.org/bugzilla/attachment.cgi?id=16954&action=edit
RHEL-215321.html

Red Hat Product Security has asked me to file the attached report upstream.

The problem is that some of the error return paths in pthread_mutex_timedlock
do not revert the robust list head update in the TCB. As a result, the kernel
may later act upon a stale pointer.

This is obviously not a vulnerability (just another reliability issue in the
robust mutex implementation), but I've been told to mention: Found by AISLE in
partnership with Red Hat

-- 
You are receiving this mail because:
You are on the CC list for the bug.