CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: core: Add TMF to tmrlist handling
An abort that is responded to by iSCSI itself is added to tmrlist but does not go to target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort and waits for completion. However, the abort will be never complete because it was not started in target core.
Unable to locate ITT: 0x05000000 on CID: 0 Unable to locate RefTaskTag: 0x05000000 on CID: 0. waitfortasks: Stopping tmf LUNRESET with tag 0x0 reftasktag 0x0 istate 34 tstate ISTATEPROCESSING refcnt 2 transportstate active,stop,fabricstop wait for tasks: tmf LUNRESET with tag 0x0 reftasktag 0x0 istate 34 tstate ISTATEPROCESSING refcnt 2 transportstate active,stop,fabricstop ... INFO: task kworker/0:2:49 blocked for more than 491 seconds. task:kworker/0:2 state:D stack: 0 pid: 49 ppid: 2 flags:0x00000800 Workqueue: events targettmrwork [targetcoremod] Call Trace: switchto+0x2c4/0x470 schedule+0x314/0x1730 schedule+0x64/0x130 scheduletimeout+0x168/0x430 waitforcompletion+0x140/0x270 targetputcmdandwait+0x64/0xb0 [targetcoremod] coretmrlunreset+0x30/0xa0 [targetcoremod] targettmrwork+0xc8/0x1b0 [targetcoremod] processonework+0x2d4/0x5d0 workerthread+0x78/0x6c0
To fix this, only add abort to tmrlist if it will be handled by target core.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26845?
CVE-2024-26845 has been classified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-26845?
To mitigate CVE-2024-26845, update to the recommended Linux versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which software is affected by CVE-2024-26845?
The affected software for CVE-2024-26845 is the Linux kernel, specifically certain versions of it on Debian.
What is the nature of CVE-2024-26845?
CVE-2024-26845 involves improper handling of abort responses that affect iSCSI in the Linux kernel.
Is there a public reference for CVE-2024-26845?
Yes, the details for CVE-2024-26845 can be found in public bug tracking systems like Launchpad.