CVE-2024-26769

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a deadlock in the nvmet-fc component of the Linux kernel. When deleting an association, the shutdown path is deadlocking because it tries to flush the nvmet wq nested. This can be avoided by deferring the put work into its own work item. The vulnerability is associated with incorrect locking in functions such as nvmet fc tgt a get(), nvmet fc finish ls req(), and nvmet fc register targetport() in drivers/nvme/target/fc.c. Exploitation of this vulnerability may allow an attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.