In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Drop chan lock before queuing buffers
Ensure read and write locks for the channel are not taken in succession by dropping the read lock from parse_xfer_event() such that a callback given to client can potentially queue buffers and acquire the write lock in that process. Any queueing of buffers should be done without channel read lock acquired as it can result in multiple locks and a soft lockup.
[mani: added fixes tag and cc'ed stable]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Mar 11, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade kernel-symsUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-64kb | Apr 18, 2024 | Mar 11, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04 | May 17, 2024 | Mar 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub