In the Linux kernel, the following vulnerability has been resolved:
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report:
- j1939_socks_lock - active_session_list_lock - sk_session_queue_lock
A reasonable fix is to change j1939_socks_lock to an rwlock, since in the rare situations where a write lock is required for the linked list that j1939_socks_lock is protecting, the code does not attempt to acquire any more locks. This would break the circular lock dependency, where, for example, the current thread already locks j1939_socks_lock and attempts to acquire sk_session_queue_lock, and at the same time, another thread attempts to acquire j1939_socks_lock while holding sk_session_queue_lock.
NOTE: This patch along does not fix the unregister_netdevice bug reported by Syzbot; instead, it solves a deadlock situation to prepare for one or more further patches to actually fix the Syzbot bug, which appears to be a reference counting problem within the j1939 codebase.
[mkl: remove unrelated newline change]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade bpftoolUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade perfUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernelUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-coreUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-headers | Nov 4, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 16, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade perfUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel | Jul 29, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-starfiveUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-kvmUpgrade linux-image-intel-iotg | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub