In the Linux kernel, the following vulnerability has been resolved:
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report:
- j1939_socks_lock - active_session_list_lock - sk_session_queue_lock
A reasonable fix is to change j1939_socks_lock to an rwlock, since in the rare situations where a write lock is required for the linked list that j1939_socks_lock is protecting, the code does not attempt to acquire any more locks. This would break the circular lock dependency, where, for example, the current thread already locks j1939_socks_lock and attempts to acquire sk_session_queue_lock, and at the same time, another thread attempts to acquire j1939_socks_lock while holding sk_session_queue_lock.
NOTE: This patch along does not fix the unregister_netdevice bug reported by Syzbot; instead, it solves a deadlock situation to prepare for one or more further patches to actually fix the Syzbot bug, which appears to be a reference counting problem within the j1939 codebase.
[mkl: remove unrelated newline change]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-debugUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-docUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-debug | Nov 4, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 16, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-rt-modules-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade libperf-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headers | Jul 29, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-starfiveUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04 | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub