PT-2024-11378 · Linux+2 · Linux Kernel+2
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a deadlock during failing recovery in the s390/qeth component of the Linux kernel. A commit removed the taking of
discipline mutex inside qeth do reset(), fixing potential deadlocks. However, an error path was missed, which still takes discipline mutex and thus has the original deadlock potential. Intermittent deadlocks were seen when a qeth channel path is configured offline, causing a race between qeth do reset and ccwgroup remove. To fix this, qeth set offline() is called directly in the qeth do reset() error case, and a new variant of ccwgroup set offline() is used, without taking discipline mutex.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Locking
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linux Kernel
Suse