PT-2024-36896
CVE-2024-56589
·
Published
2024-12-27
·
Updated
2026-07-25
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
The issue arises in the hisi sas driver when both the hardware interrupt handler and the interrupt thread are executed on the same CPU, leading to a soft lockup. This occurs when an expander is connected to 12 high-performance SAS SSDs, causing the CPU to be continuously consumed and unable to run the watchdog thread. As a result, a call trace occurs when the watchdog time exceeds the specified time.
Recommendations
To resolve the issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider adding cond resched() to execute the watchdog thread. Restrict access to the hisi sas driver to minimize the risk of exploitation until the issue is resolved.
Found an issue in the description? Have something to add? Feel free to write us 👾