CVE-2024-42294

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vulnerability is related to a deadlock between sd remove and sd release in the block component of the Linux kernel. This deadlock can cause tasks to become blocked for an extended period, leading to a denial-of-service condition. The issue arises when the SCSI subsystem does not set the GD OWNS QUEUE flag, resulting in the QUEUE FLAG DYING flag not being set. This scenario creates a classic ABBA deadlock. To fix the deadlock, it is essential not to acquire the disk->open mutex after freezing the queue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.