In the Linux kernel, the following vulnerability has been resolved:
tty: n_gsm: fix race condition in status line change on dead connections
gsm_cleanup_mux() cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure, however, may cause subsequent changes of the virtual modem status lines of a DLCI. More data is being added the outgoing data queue and the deleted kick timer is restarted to handle this. At this point many resources have already been removed by the cleanup procedure. Thus, a kernel panic occurs.
Fix this by proving in gsm_modem_update() that the cleanup procedure has not been started and the mux is still alive.
Note that writing to a virtual tty is already protected by checks against the DLCI specific connection state.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-develUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-azureUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-rt | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15Upgrade linux-awsUpgrade linuxUpgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-azureUpgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-nvidia-6.5Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-gkeop-5.15Upgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-fipsUpgrade linux-realtimeUpgrade linux-oracleUpgrade linux-ibm-5.15Upgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-azure-fdeUpgrade linux-raspiUpgrade linux-azure-5.15Upgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegraUpgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-xilinx-zynqmpUpgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub