In the Linux kernel, the following vulnerability has been resolved:
tty: n_gsm: fix race condition in status line change on dead connections
gsm_cleanup_mux() cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure, however, may cause subsequent changes of the virtual modem status lines of a DLCI. More data is being added the outgoing data queue and the deleted kick timer is restarted to handle this. At this point many resources have already been removed by the cleanup procedure. Thus, a kernel panic occurs.
Fix this by proving in gsm_modem_update() that the cleanup procedure has not been started and the mux is still alive.
Note that writing to a virtual tty is already protected by checks against the DLCI specific connection state.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rtUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade dtb-amazonUpgrade kernel-macros | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-gkeopUpgrade linux-nvidia-tegraUpgrade linux-xilinx-zynqmpUpgrade linux-azure-5.15Upgrade linux-realtimeUpgrade linux-ibm-5.15Upgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-raspiUpgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iotgUpgrade linux-lowlatencyUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-hwe-5.15Upgrade linux-nvidia-6.5Upgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linuxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-gkeop-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-azureUpgrade linux-aws | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub