CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible
In the Linux kernel, the following vulnerability has been resolved:
scsi: qedf: Make qedfexecutetmf() non-preemptible
Stop calling smpprocessorid() from preemptible code in qedfexecutetmf90. This results in BUGON() when running an RT kernel.
[ 659.343280] BUG: using smpprocessorid() in preemptible [00000000] code: sgreset/3646 [ 659.343282] caller is qedfexecutetmf+0x8b/0x360 [qedf]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.4.280 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.10.222 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.163 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.98 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.39 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.9 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42124?
CVE-2024-42124 is considered to have moderate severity due to potential stability issues in real-time kernel scenarios.
How do I fix CVE-2024-42124?
To fix CVE-2024-42124, update your Linux kernel to a version that includes the resolution, such as 5.4.280, 5.10.222, 5.15.163, 6.1.98, 6.6.39, 6.9.9, or 6.10.
Which versions of the Linux kernel are affected by CVE-2024-42124?
CVE-2024-42124 affects multiple versions of the Linux kernel prior to the specified remediation versions listed in the vulnerability details.
What are the impacts of CVE-2024-42124 on system performance?
The impacts of CVE-2024-42124 may include potential system crashes or instability in real-time operating environments.
Is CVE-2024-42124 a local or remote vulnerability?
CVE-2024-42124 is primarily a local vulnerability that affects the kernel's ability to handle certain tasks in real-time environments.