PT-2024-11378

CVE-2021-47382

·

Published

2021-09-21

·

Updated

2026-08-23

Description by

CVSS 3.1
4.7
Medium
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a deadlock during failing recovery in the s390/qeth component of the Linux kernel. A commit removed the taking of discipline mutex inside qeth do reset(), fixing potential deadlocks. However, an error path was missed, which still takes discipline mutex and thus has the original deadlock potential. Intermittent deadlocks were seen when a qeth channel path is configured offline, causing a race between qeth do reset and ccwgroup remove. To fix this, qeth set offline() is called directly in the qeth do reset() error case, and a new variant of ccwgroup set offline() is used, without taking discipline mutex.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
OESA-2024-1962
OESA-2024-1964
OESA-2024-2258
OPENSUSE-SU-2024_2185-1
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:1979-1
SUSE-SU-2024:1983-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2184-1
SUSE-SU-2024:2185-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
Found an issue in the description? Have something to add? Feel free to write us 👾