CVE-2024-42294: block: fix deadlock between sd_remove & sd_release
block: fix deadlock between sdremove & sdrelease
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Compensating control
Modify the block/SCSI disk removal and release flow so it does not acquire disk->open_mutex after freezing the queue, preventing the deadlock between sd_remove and sd_release.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42294?
CVE-2024-42294 has a moderate severity level due to the potential for deadlock conditions in the Linux kernel.
How do I fix CVE-2024-42294?
To fix CVE-2024-42294, upgrade your Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.9-1, or 6.12.10-1.
Which versions of the Linux kernel are affected by CVE-2024-42294?
CVE-2024-42294 affects Linux kernel versions between 6.5 and 6.6.44, as well as versions between 6.7 and 6.10.3.
What specific issue does CVE-2024-42294 address in the Linux kernel?
CVE-2024-42294 addresses a deadlock problem that occurs between sd_remove and sd_release, leading to blocked tasks.
When was CVE-2024-42294 resolved?
CVE-2024-42294 was resolved in the stable releases of the Linux kernel after the identification of the deadlock issue.