PT-2024-3778
CVE-2024-26605
·
Published
2024-01-31
·
Updated
2026-10-09
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 6.7.0
Description
A potential deadlock can occur when enabling ASPM during the probe of Qualcomm PCIe controllers, as reported by lockdep. This issue is caused by a possible recursive locking scenario where a task tries to acquire a lock that it already holds, leading to a deadlock. The deadlock can be easily reproduced on machines like the Lenovo ThinkPad X13s by adding a delay to increase the race window during asynchronous probe, allowing another thread to take a write lock.
Recommendations
For Linux kernel version 6.7.0, update to a newer version that includes the fix for the deadlock issue, which introduces a new
pci set power state locked() function and associated helper functions to avoid taking the read lock twice.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾