In the Linux kernel, the following vulnerability has been resolved:
isdn: mISDN: Fix sleeping function called from invalid context
The driver can call card->isac.release() function from an atomic context.
Fix this by calling this function after releasing the lock.
The following log reveals it:
[ 44.168226 ] BUG: sleeping function called from invalid context at kernel/workqueue.c:3018 [ 44.168941 ] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5475, name: modprobe [ 44.169574 ] INFO: lockdep is turned off. [ 44.169899 ] irq event stamp: 0 [ 44.170160 ] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 44.170627 ] hardirqs last disabled at (0): [<ffffffff814209ed>] copy_process+0x132d/0x3e00 [ 44.171240 ] softirqs last enabled at (0): [<ffffffff81420a1a>] copy_process+0x135a/0x3e00 [ 44.171852 ] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 44.172318 ] Preemption disabled at: [ 44.172320 ] [<ffffffffa009b0a9>] nj_release+0x69/0x500 [netjet] [ 44.174441 ] Call Trace: [ 44.174630 ] dump_stack_lvl+0xa8/0xd1 [ 44.174912 ] dump_stack+0x15/0x17 [ 44.175166 ] ___might_sleep+0x3a2/0x510 [ 44.175459 ] ? nj_release+0x69/0x500 [netjet] [ 44.175791 ] __might_sleep+0x82/0xe0 [ 44.176063 ] ? start_flush_work+0x20/0x7b0 [ 44.176375 ] start_flush_work+0x33/0x7b0 [ 44.176672 ] ? trace_irq_enable_rcuidle+0x85/0x170 [ 44.177034 ] ? kasan_quarantine_put+0xaa/0x1f0 [ 44.177372 ] ? kasan_quarantine_put+0xaa/0x1f0 [ 44.177711 ] __flush_work+0x11a/0x1a0 [ 44.177991 ] ? flush_work+0x20/0x20 [ 44.178257 ] ? lock_release+0x13c/0x8f0 [ 44.178550 ] ? __kasan_check_write+0x14/0x20 [ 44.178872 ] ? do_raw_spin_lock+0x148/0x360 [ 44.179187 ] ? read_lock_is_recursive+0x20/0x20 [ 44.179530 ] ? __kasan_check_read+0x11/0x20 [ 44.179846 ] ? do_raw_spin_unlock+0x55/0x900 [ 44.180168 ] ? ____kasan_slab_free+0x116/0x140 [ 44.180505 ] ? _raw_spin_unlock_irqrestore+0x41/0x60 [ 44.180878 ] ? skb_queue_purge+0x1a3/0x1c0 [ 44.181189 ] ? kfree+0x13e/0x290 [ 44.181438 ] flush_work+0x17/0x20 [ 44.181695 ] mISDN_freedchannel+0xe8/0x100 [ 44.182006 ] isac_release+0x210/0x260 [mISDNipac] [ 44.182366 ] nj_release+0xf6/0x500 [netjet] [ 44.182685 ] nj_remove+0x48/0x70 [netjet] [ 44.182989 ] pci_device_remove+0xa9/0x250
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-rt-debug-core | Aug 12, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-rt-debug | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-preemptUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-preempt-devel | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-hweUpgrade linux-azure-fde-5.15Upgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-azureUpgrade linux-kvmUpgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-gcp-4.15Upgrade linux-raspi | Nov 19, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub