s390/debug: Fix deadlock during unregister
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.5, 5.11, 5.14, 5.15, 5.15.221, and 5 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix deadlock during unregister Unregistering an s390dbf debug area while one of the associated debugfs files is being written to can cause a deadlock: $ echo >.../vmur/level $ rmmod vmur =================================================== debugfs write debugfs_file_get() debug_unregister() mutex_lock(debug_mutex) debugfs_remove() wait for debugfs_file_put() debug_file_ops.write() debug_input() mutex_lock(debug_mutex) ==> DEADLOCK Fix this by splitting debug_unregister() into an s390dbf and debugfs part, and running only the s390dbf part with debug_mutex locked.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 9372a82892c2caa6bccab9a4081166fa769699f8 · fixed in a214c3dacc779b2afcb0ac9c8001e45ee4ffb2ed; From 9372a82892c2caa6bccab9a4081166fa769699f8 · fixed in 183f8f6d64bb0510070c856b9927618c53014a7b; From 9372a82892c2caa6bccab9a4081166fa769699f8 · fixed in a08b70ed2d1ec907353a72f15163b8e34ff4b2f8; From 9372a82892c2caa6bccab9a4081166fa769699f8 · fixed in 45bb341d1b73eb293e0dd43d9b72bbc8b615d0ba; From 9372a82892c2caa6bccab9a4081166fa769699f8 · fixed in 5d83f3faa3fb7f23f298cfd40382611999de5d1d; From 9372a82892c2caa6bccab9a4081166fa769699f8 · fixed in 54e1259b75d6402a1d0cfb822b9bb2c507e53dab; From 9372a82892c2caa6bccab9a4081166fa769699f8 · fixed in 445c31ac638fd1af203d79bdf25fc0cb3149fbbc; From 5.4.146 · fixed in 5.5; From 5.10.65 · fixed in 5.11; From 5.13.17 · fixed in 5.14; From 5.14.4 · fixed in 5.15
- Linux Linux
5.15
- KernelLinux
From 5.15.0 · fixed in 5.15.221; From 5.16.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.6
References 7
git.kernel.org
- stable/c/a214c3dacc779b2afcb0ac9c8001e45ee4ffb2ed
- stable/c/183f8f6d64bb0510070c856b9927618c53014a7b
- stable/c/a08b70ed2d1ec907353a72f15163b8e34ff4b2f8
- stable/c/45bb341d1b73eb293e0dd43d9b72bbc8b615d0ba
- stable/c/5d83f3faa3fb7f23f298cfd40382611999de5d1d
- stable/c/54e1259b75d6402a1d0cfb822b9bb2c507e53dab
- stable/c/445c31ac638fd1af203d79bdf25fc0cb3149fbbc