CVE-2024-38589

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37

Description: The vulnerability is related to a possible dead-lock in the nr rt ioctl() function. It occurs when the nr node list lock is acquired before the nr node lock, leading to a circular locking dependency. This can cause a denial-of-service (DoS) condition. The issue is due to the incorrect ordering of lock acquisitions in the nr rt ioctl() function.

Recommendations: To resolve the issue, update the Linux kernel to version 6.6.37 or later. This version includes the fix for the possible dead-lock in the nr rt ioctl() function. Ensure that all affected systems are updated to this version or later to prevent potential exploitation of this vulnerability.