In the Linux kernel, the following vulnerability has been resolved:
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report:
- j1939_socks_lock - active_session_list_lock - sk_session_queue_lock
A reasonable fix is to change j1939_socks_lock to an rwlock, since in the rare situations where a write lock is required for the linked list that j1939_socks_lock is protecting, the code does not attempt to acquire any more locks. This would break the circular lock dependency, where, for example, the current thread already locks j1939_socks_lock and attempts to acquire sk_session_queue_lock, and at the same time, another thread attempts to acquire j1939_socks_lock while holding sk_session_queue_lock.
NOTE: This patch along does not fix the unregister_netdevice bug reported by Syzbot; instead, it solves a deadlock situation to prepare for one or more further patches to actually fix the Syzbot bug, which appears to be a reference counting problem within the j1939 codebase.
[mkl: remove unrelated newline change]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade libperfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade rvUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-debug-modules | Nov 4, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 16, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade rvUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-modulesUpgrade libperfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-uki-virt | Jul 29, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-nvidia-6.5Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-azure-lts-22.04 | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub