CVE-2024-41053: scsi: ufs: core: Fix ufshcd_abort_one racing issue
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Fix ufshcdabortone racing issue
When ufshcdabortone is racing with the completion ISR, the completed tag of the request's mqhctx pointer will be set to NULL by ISR. Return success when request is completed by ISR because ufshcdabortone does not need to do anything.
The racing flow is:
Thread A ufshcderrhandler step 1 ... ufshcdabortone ufshcdtrytoaborttask ufshcdcmdinflight(true) step 3 ufshcdmcqreqtohwq blkmquniquetag rq->mqhctx->queuenum step 5
Thread B ufsmtkmcqintr(cq complete ISR) step 2 scsidone ... blkmqfreerequest rq->mqhctx = NULL; step 4
Below is KE back trace. ufshcdtrytoaborttask: cmd at tag 41 not pending in the device. ufshcdtrytoaborttask: cmd at tag=41 is cleared. Aborting tag 41 / CDB 0x28 succeeded Unable to handle kernel NULL pointer dereference at virtual address 0000000000000194 pc : [0xffffffddd7a79bf8] blkmquniquetag+0x8/0x14 lr : [0xffffffddd6155b84] ufshcdmcqreqtohwq+0x1c/0x40 [ufsmediatekmodise] domemabort+0x58/0x118 el1abort+0x3c/0x5c el1h64synchandler+0x54/0x90 el1h64sync+0x68/0x6c blkmquniquetag+0x8/0x14 ufshcderrhandler+0xae4/0xfa8 [ufsmediatekmodise] processonework+0x208/0x4fc workerthread+0x228/0x438 kthread+0x104/0x1d4 retfromfork+0x10/0x20
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41053?
CVE-2024-41053 is classified as a high-severity vulnerability due to its potential to impact system stability and security.
How do I fix CVE-2024-41053?
To mitigate CVE-2024-41053, upgrade to the fixed versions of the Linux kernel listed in the vulnerability report.
Which versions of the Linux kernel are affected by CVE-2024-41053?
CVE-2024-41053 affects several versions between 5.10 and 6.6.5 of the Linux kernel, among others.
Is CVE-2024-41053 a local or remote vulnerability?
CVE-2024-41053 is primarily considered a local vulnerability, as it involves race conditions in the kernel.
What components are impacted by CVE-2024-41053?
CVE-2024-41053 specifically affects the SCSI UFS (Universal Flash Storage) driver in the Linux kernel.