CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model

Published Dec 27, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

scsi: hisisas: Add condresched() for no forced preemption model

For no forced preemption model kernel, in the scenario where the expander is connected to 12 high performance SAS SSDs, the following call trace may occur:

[ 214.409199][ C240] watchdog: BUG: soft lockup - CPU#240 stuck for 22s! [irq/149-hisisa:3211] [ 214.568533][ C240] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--) [ 214.575224][ C240] pc : fputmany+0x8c/0xdc [ 214.579480][ C240] lr : fput+0x1c/0xf0 [ 214.583302][ C240] sp : ffff80002de2b900 [ 214.587298][ C240] x29: ffff80002de2b900 x28: ffff1082aa412000 [ 214.593291][ C240] x27: ffff3062a0348c08 x26: ffff80003a9f6000 [ 214.599284][ C240] x25: ffff1062bbac5c40 x24: 0000000000001000 [ 214.605277][ C240] x23: 000000000000000a x22: 0000000000000001 [ 214.611270][ C240] x21: 0000000000001000 x20: 0000000000000000 [ 214.617262][ C240] x19: ffff3062a41ae580 x18: 0000000000010000 [ 214.623255][ C240] x17: 0000000000000001 x16: ffffdb3a6efe5fc0 [ 214.629248][ C240] x15: ffffffffffffffff x14: 0000000003ffffff [ 214.635241][ C240] x13: 000000000000ffff x12: 000000000000029c [ 214.641234][ C240] x11: 0000000000000006 x10: ffff80003a9f7fd0 [ 214.647226][ C240] x9 : ffffdb3a6f0482fc x8 : 0000000000000001 [ 214.653219][ C240] x7 : 0000000000000002 x6 : 0000000000000080 [ 214.659212][ C240] x5 : ffff55480ee9b000 x4 : fffffde7f94c6554 [ 214.665205][ C240] x3 : 0000000000000002 x2 : 0000000000000020 [ 214.671198][ C240] x1 : 0000000000000021 x0 : ffff3062a41ae5b8 [ 214.677191][ C240] Call trace: [ 214.680320][ C240] fputmany+0x8c/0xdc [ 214.684230][ C240] fput+0x1c/0xf0 [ 214.687707][ C240] aiocompleterw+0xd8/0x1fc [ 214.692225][ C240] blkdevbioendio+0x98/0x140 [ 214.696917][ C240] bioendio+0x160/0x1bc [ 214.701001][ C240] blkupdaterequest+0x1c8/0x3bc [ 214.705867][ C240] scsiendrequest+0x3c/0x1f0 [ 214.710471][ C240] scsiiocompletion+0x7c/0x1a0 [ 214.715249][ C240] scsifinishcommand+0x104/0x140 [ 214.720200][ C240] scsisoftirqdone+0x90/0x180 [ 214.724892][ C240] blkmqcompleterequest+0x5c/0x70 [ 214.730016][ C240] scsimqdone+0x48/0xac [ 214.734194][ C240] sasscsitaskdone+0xbc/0x16c [libsas] [ 214.739758][ C240] slotcompletev3hw+0x260/0x760 [hisisasv3hw] [ 214.746185][ C240] cqthreadv3hw+0xbc/0x190 [hisisasv3hw] [ 214.752179][ C240] irqthreadfn+0x34/0xa4 [ 214.756435][ C240] irqthread+0xc4/0x130 [ 214.760520][ C240] kthread+0x108/0x13c [ 214.764430][ C240] retfromfork+0x10/0x18

This is because in the hisisas driver, both the hardware interrupt handler and the interrupt thread are executed on the same CPU. In the performance test scenario, function irqwaitforinterrupt() will always return 0 if lots of interrupts occurs and the CPU will be continuously consumed. As a result, the CPU cannot run the watchdog thread. When the watchdog time exceeds the specified time, call trace occurs.

To fix it, add condresched() to execute the watchdog thread.

Other sources

This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.

Launchpad

Affected Software

8 affected componentsFixes available
Linux Linux kernel
debian/linux<=5.10.223-1
5.10.234-16.1.129-16.1.135-16.12.27-1
debian/linux-6.1
6.1.129-1~deb11u1
Linux Linux kernel>=4.5<5.10.231
Linux Linux kernel>=5.11<5.15.174
Linux Linux kernel>=5.16<6.1.120
Linux Linux kernel>=6.2<6.6.66
Linux Linux kernel>=6.7<6.12.5

Event History

Dec 27, 2024
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
Description
Data Sourced
via NVD·03:15 PM
Description
Data Sourced
via NVD·03:15 PM
RemedySeverityAffected Software
Mar 31, 2025
Data Sourced
via Launchpad·06:46 PM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·06:51 PM
RemedyDescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-56589?

CVE-2024-56589 has been classified with a moderate severity level.

2

How do I fix CVE-2024-56589?

To fix CVE-2024-56589, update your Linux kernel to the latest stable version that addresses the vulnerability.

3

Which versions of the Linux kernel are affected by CVE-2024-56589?

CVE-2024-56589 affects specific versions of the Linux kernel that utilize the no forced preemption model.

4

What is the impact of CVE-2024-56589?

The impact of CVE-2024-56589 can lead to potential performance issues in systems using high-performance SAS SSDs.

5

What components are involved in CVE-2024-56589?

CVE-2024-56589 specifically involves the SCSI subsystem, particularly the hisi_sas driver in the Linux kernel.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203