PT-2024-11378
CVE-2021-47382
·
Published
2021-09-21
·
Updated
2026-08-23
Description by
CVSS 3.1
4.7
MediumMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a deadlock during failing recovery in the s390/qeth component of the Linux kernel. A commit removed the taking of
discipline mutex inside qeth do reset(), fixing potential deadlocks. However, an error path was missed, which still takes discipline mutex and thus has the original deadlock potential. Intermittent deadlocks were seen when a qeth channel path is configured offline, causing a race between qeth do reset and ccwgroup remove. To fix this, qeth set offline() is called directly in the qeth do reset() error case, and a new variant of ccwgroup set offline() is used, without taking discipline mutex.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾