In the Linux kernel, the following vulnerability has been resolved:
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report:
- j1939_socks_lock - active_session_list_lock - sk_session_queue_lock
A reasonable fix is to change j1939_socks_lock to an rwlock, since in the rare situations where a write lock is required for the linked list that j1939_socks_lock is protecting, the code does not attempt to acquire any more locks. This would break the circular lock dependency, where, for example, the current thread already locks j1939_socks_lock and attempts to acquire sk_session_queue_lock, and at the same time, another thread attempts to acquire j1939_socks_lock while holding sk_session_queue_lock.
NOTE: This patch along does not fix the unregister_netdevice bug reported by Syzbot; instead, it solves a deadlock situation to prepare for one or more further patches to actually fix the Syzbot bug, which appears to be a reference counting problem within the j1939 codebase.
[mkl: remove unrelated newline change]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-debugUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade rvUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-coreUpgrade kernel-64k-coreUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade libperf | Nov 4, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 16, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade rtlaUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade rvUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-core | Jul 29, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-starfiveUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-azureUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-raspiUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-1061-aws | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub