In the Linux kernel, the following vulnerability has been resolved:
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report:
- j1939_socks_lock - active_session_list_lock - sk_session_queue_lock
A reasonable fix is to change j1939_socks_lock to an rwlock, since in the rare situations where a write lock is required for the linked list that j1939_socks_lock is protecting, the code does not attempt to acquire any more locks. This would break the circular lock dependency, where, for example, the current thread already locks j1939_socks_lock and attempts to acquire sk_session_queue_lock, and at the same time, another thread attempts to acquire j1939_socks_lock while holding sk_session_queue_lock.
NOTE: This patch along does not fix the unregister_netdevice bug reported by Syzbot; instead, it solves a deadlock situation to prepare for one or more further patches to actually fix the Syzbot bug, which appears to be a reference counting problem within the j1939 codebase.
[mkl: remove unrelated newline change]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-64k-modules-extraUpgrade kernel-64kUpgrade kernel-64k-debugUpgrade kernel-debug-modulesUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debugUpgrade rtlaUpgrade kernel-64k-devel-matchedUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-uki-virtUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-devel | Nov 4, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 16, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade perfUpgrade libperf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade libperf | Jul 29, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1024-azure-fde | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub