In the Linux kernel, the following vulnerability has been resolved:
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report:
- j1939_socks_lock - active_session_list_lock - sk_session_queue_lock
A reasonable fix is to change j1939_socks_lock to an rwlock, since in the rare situations where a write lock is required for the linked list that j1939_socks_lock is protecting, the code does not attempt to acquire any more locks. This would break the circular lock dependency, where, for example, the current thread already locks j1939_socks_lock and attempts to acquire sk_session_queue_lock, and at the same time, another thread attempts to acquire j1939_socks_lock while holding sk_session_queue_lock.
NOTE: This patch along does not fix the unregister_netdevice bug reported by Syzbot; instead, it solves a deadlock situation to prepare for one or more further patches to actually fix the Syzbot bug, which appears to be a reference counting problem within the j1939 codebase.
[mkl: remove unrelated newline change]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-develUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-coreUpgrade perf | Nov 4, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 16, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade rvUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade libperf-debuginfoUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-core | Jul 29, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-azureUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-intelUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-gke | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub