PT-2024-7858

CVE-2024-27031

·

تاريخ النشر

2024-03-09

·

تاريخ التحديث

2025-03-28

الوصف من

CVSS 3.1
5.5
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0
Description The vulnerability is related to the NFS component of the Linux kernel. It is caused by incorrect locking in the nfs netfs issue read() function, which can lead to a deadlock when interrupts are not disabled while iterating through pages in the xarray to submit for NFS read. This issue can be reproduced with a specific test and may cause inconsistent lock state warnings on a lockdep-enabled kernel. The problem can occur when another page in the mapping is processed for writeback inside an interrupt, leading to a potential deadlock.
Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the nfs netfs issue read() xarray locking for writeback interrupt. As a temporary workaround, consider disabling the nfs netfs issue read() function until a patch is available. However, this may have performance implications and should be carefully evaluated before implementation.
Note: The provided information does not specify the exact fixed version, so it is recommended to update to the latest available kernel version to ensure the inclusion of the necessary fix.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
SUSE-SU-2024:2135-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20249-1
USN-6816-1
USN-6817-1
USN-6817-2
USN-6817-3
USN-6878-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾