CVE-2024-35998

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37

Description A potential deadlock in the cifs sync mid result function has been resolved. The issue was spotted by Coverity, which identified a thread deadlock due to lock ordering. The problem occurs when the spin lock acquires the lock TCP Server Info.srv lock while holding the lock TCP Server Info.mid lock, resulting in a "Thread deadlock (ORDER REVERSAL)".

Recommendations To resolve the issue, update the Linux kernel to version 6.6.37 or later. As a temporary workaround, consider disabling the cifs sync mid result function until a patch is available. Restrict access to the vulnerable TCP Server Info module to minimize the risk of exploitation.