In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: protect device queue against concurrent access
In dasd_profile_start() the amount of requests on the device queue are counted. The access to the device queue is unprotected against concurrent access. With a lot of parallel I/O, especially with alias devices enabled, the device queue can change while dasd_profile_start() is accessing the queue. In the worst case this leads to a kernel panic due to incorrect pointer accesses.
Fix this by taking the device lock before accessing the queue and counting the requests. Additionally the check for a valid profile data pointer can be done earlier to avoid unnecessary locking in a hot path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade kernel-sourceUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-baseUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade dtb-apmUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dtb-freescale | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5Upgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-azure-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-gkeop-5.15Upgrade linux-nvidiaUpgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linux-iotUpgrade linux-azure-5.15Upgrade linux-bluefieldUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-realtimeUpgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-raspiUpgrade linux-riscv-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-aws-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-gkeUpgrade linux-gcp-5.4Upgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linuxUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegraUpgrade linux-aws-fipsUpgrade linux-oracle-5.15Upgrade linux-hwe-5.4Upgrade linux-ibm-5.4 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub