PT-2026-37551 · Linux+2 · Linux Kernel+2
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the
pci slot trylock() function where error handling is incorrectly implemented. Following a change that delegated the bridge device's pci dev trylock() to pci bus trylock(), the corresponding pci dev unlock() call was not removed from the failure path. This results in the system attempting to unlock a device that was not locked, leading to either a warning that a lock is being released without being held or the incorrect unlocking of a lock belonging to another thread.Recommendations
Remove the redundant
pci dev unlock() call on the failure path within the pci slot trylock() function.Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu