CVE-2024-42090

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a potential deadlock in the create pinctrl() function when handling -EPROBE DEFER. In create pinctrl(), pinctrl maps mutex is acquired before calling add setting(). If add setting() returns -EPROBE DEFER, create pinctrl() calls pinctrl free(). However, pinctrl free() attempts to acquire pinctrl maps mutex, which is already held by create pinctrl(), leading to a potential deadlock. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc. The patch resolves the issue by releasing pinctrl maps mutex before calling pinctrl free(), preventing the deadlock. An attacker could exploit this vulnerability to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.