In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: protect device queue against concurrent access
In dasd_profile_start() the amount of requests on the device queue are counted. The access to the device queue is unprotected against concurrent access. With a lot of parallel I/O, especially with alias devices enabled, the device queue can change while dasd_profile_start() is accessing the queue. In the worst case this leads to a kernel panic due to incorrect pointer accesses.
Fix this by taking the device lock before accessing the queue and counting the requests. Additionally the check for a valid profile data pointer can be done earlier to avoid unnecessary locking in a hot path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-baseUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azure | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-gkeopUpgrade linux-awsUpgrade linux-nvidia-tegra-igxUpgrade linux-hwe-5.4Upgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-nvidia-tegraUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-azure-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-azure-5.15Upgrade linux-azure-fdeUpgrade linux-aws-5.4Upgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-gkeop-5.15Upgrade linux-raspiUpgrade linux-iotUpgrade linux-intel-iotgUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-kvmUpgrade linux-ibmUpgrade linux-nvidia-6.5Upgrade linux-aws-5.15Upgrade linux-azureUpgrade linux-oracleUpgrade linux-riscv-5.15Upgrade linux-nvidia | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub