In the Linux kernel, the following vulnerability has been resolved:
isdn: mISDN: Fix sleeping function called from invalid context
The driver can call card->isac.release() function from an atomic context.
Fix this by calling this function after releasing the lock.
The following log reveals it:
[ 44.168226 ] BUG: sleeping function called from invalid context at kernel/workqueue.c:3018 [ 44.168941 ] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5475, name: modprobe [ 44.169574 ] INFO: lockdep is turned off. [ 44.169899 ] irq event stamp: 0 [ 44.170160 ] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 44.170627 ] hardirqs last disabled at (0): [<ffffffff814209ed>] copy_process+0x132d/0x3e00 [ 44.171240 ] softirqs last enabled at (0): [<ffffffff81420a1a>] copy_process+0x135a/0x3e00 [ 44.171852 ] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 44.172318 ] Preemption disabled at: [ 44.172320 ] [<ffffffffa009b0a9>] nj_release+0x69/0x500 [netjet] [ 44.174441 ] Call Trace: [ 44.174630 ] dump_stack_lvl+0xa8/0xd1 [ 44.174912 ] dump_stack+0x15/0x17 [ 44.175166 ] ___might_sleep+0x3a2/0x510 [ 44.175459 ] ? nj_release+0x69/0x500 [netjet] [ 44.175791 ] __might_sleep+0x82/0xe0 [ 44.176063 ] ? start_flush_work+0x20/0x7b0 [ 44.176375 ] start_flush_work+0x33/0x7b0 [ 44.176672 ] ? trace_irq_enable_rcuidle+0x85/0x170 [ 44.177034 ] ? kasan_quarantine_put+0xaa/0x1f0 [ 44.177372 ] ? kasan_quarantine_put+0xaa/0x1f0 [ 44.177711 ] __flush_work+0x11a/0x1a0 [ 44.177991 ] ? flush_work+0x20/0x20 [ 44.178257 ] ? lock_release+0x13c/0x8f0 [ 44.178550 ] ? __kasan_check_write+0x14/0x20 [ 44.178872 ] ? do_raw_spin_lock+0x148/0x360 [ 44.179187 ] ? read_lock_is_recursive+0x20/0x20 [ 44.179530 ] ? __kasan_check_read+0x11/0x20 [ 44.179846 ] ? do_raw_spin_unlock+0x55/0x900 [ 44.180168 ] ? ____kasan_slab_free+0x116/0x140 [ 44.180505 ] ? _raw_spin_unlock_irqrestore+0x41/0x60 [ 44.180878 ] ? skb_queue_purge+0x1a3/0x1c0 [ 44.181189 ] ? kfree+0x13e/0x290 [ 44.181438 ] flush_work+0x17/0x20 [ 44.181695 ] mISDN_freedchannel+0xe8/0x100 [ 44.182006 ] isac_release+0x210/0x260 [mISDNipac] [ 44.182366 ] nj_release+0xf6/0x500 [netjet] [ 44.182685 ] nj_remove+0x48/0x70 [netjet] [ 44.182989 ] pci_device_remove+0xa9/0x250
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-debugUpgrade kernel-docUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-tools | Aug 12, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-debug-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-azureUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade dtb-caviumUpgrade kernel-preempt-develUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade gfs2-kmp-azure | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-aws-hweUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-4.15Upgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-azure-fde-5.15Upgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-hweUpgrade linux-oracleUpgrade linux-raspi | Nov 19, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub