In the Linux kernel, the following vulnerability has been resolved:
isdn: mISDN: Fix sleeping function called from invalid context
The driver can call card->isac.release() function from an atomic context.
Fix this by calling this function after releasing the lock.
The following log reveals it:
[ 44.168226 ] BUG: sleeping function called from invalid context at kernel/workqueue.c:3018 [ 44.168941 ] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5475, name: modprobe [ 44.169574 ] INFO: lockdep is turned off. [ 44.169899 ] irq event stamp: 0 [ 44.170160 ] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 44.170627 ] hardirqs last disabled at (0): [<ffffffff814209ed>] copy_process+0x132d/0x3e00 [ 44.171240 ] softirqs last enabled at (0): [<ffffffff81420a1a>] copy_process+0x135a/0x3e00 [ 44.171852 ] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 44.172318 ] Preemption disabled at: [ 44.172320 ] [<ffffffffa009b0a9>] nj_release+0x69/0x500 [netjet] [ 44.174441 ] Call Trace: [ 44.174630 ] dump_stack_lvl+0xa8/0xd1 [ 44.174912 ] dump_stack+0x15/0x17 [ 44.175166 ] ___might_sleep+0x3a2/0x510 [ 44.175459 ] ? nj_release+0x69/0x500 [netjet] [ 44.175791 ] __might_sleep+0x82/0xe0 [ 44.176063 ] ? start_flush_work+0x20/0x7b0 [ 44.176375 ] start_flush_work+0x33/0x7b0 [ 44.176672 ] ? trace_irq_enable_rcuidle+0x85/0x170 [ 44.177034 ] ? kasan_quarantine_put+0xaa/0x1f0 [ 44.177372 ] ? kasan_quarantine_put+0xaa/0x1f0 [ 44.177711 ] __flush_work+0x11a/0x1a0 [ 44.177991 ] ? flush_work+0x20/0x20 [ 44.178257 ] ? lock_release+0x13c/0x8f0 [ 44.178550 ] ? __kasan_check_write+0x14/0x20 [ 44.178872 ] ? do_raw_spin_lock+0x148/0x360 [ 44.179187 ] ? read_lock_is_recursive+0x20/0x20 [ 44.179530 ] ? __kasan_check_read+0x11/0x20 [ 44.179846 ] ? do_raw_spin_unlock+0x55/0x900 [ 44.180168 ] ? ____kasan_slab_free+0x116/0x140 [ 44.180505 ] ? _raw_spin_unlock_irqrestore+0x41/0x60 [ 44.180878 ] ? skb_queue_purge+0x1a3/0x1c0 [ 44.181189 ] ? kfree+0x13e/0x290 [ 44.181438 ] flush_work+0x17/0x20 [ 44.181695 ] mISDN_freedchannel+0xe8/0x100 [ 44.182006 ] isac_release+0x210/0x260 [mISDNipac] [ 44.182366 ] nj_release+0xf6/0x500 [netjet] [ 44.182685 ] nj_remove+0x48/0x70 [netjet] [ 44.182989 ] pci_device_remove+0xa9/0x250
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-core | Aug 12, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64 | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade dtb-amazonUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dlm-kmp-default | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15Upgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-fipsUpgrade linux-raspiUpgrade linux-gcp-4.15Upgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4Upgrade linux-aws-hweUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-gcp | Nov 19, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub