In the Linux kernel, the following vulnerability has been resolved:
scsi: hisi_sas: Fix a deadlock issue related to automatic dump
If we issue a disabling PHY command, the device attached with it will go offline, if a 2 bit ECC error occurs at the same time, a hung task may be found:
[ 4613.652388] INFO: task kworker/u256:0:165233 blocked for more than 120 seconds. [ 4613.666297] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4613.674809] task:kworker/u256:0 state:D stack: 0 pid:165233 ppid: 2 flags:0x00000208 [ 4613.683959] Workqueue: 0000:74:02.0_disco_q sas_revalidate_domain [libsas] [ 4613.691518] Call trace: [ 4613.694678] __switch_to+0xf8/0x17c [ 4613.698872] __schedule+0x660/0xee0 [ 4613.703063] schedule+0xac/0x240 [ 4613.706994] schedule_timeout+0x500/0x610 [ 4613.711705] __down+0x128/0x36c [ 4613.715548] down+0x240/0x2d0 [ 4613.719221] hisi_sas_internal_abort_timeout+0x1bc/0x260 [hisi_sas_main] [ 4613.726618] sas_execute_internal_abort+0x144/0x310 [libsas] [ 4613.732976] sas_execute_internal_abort_dev+0x44/0x60 [libsas] [ 4613.739504] hisi_sas_internal_task_abort_dev.isra.0+0xbc/0x1b0 [hisi_sas_main] [ 4613.747499] hisi_sas_dev_gone+0x174/0x250 [hisi_sas_main] [ 4613.753682] sas_notify_lldd_dev_gone+0xec/0x2e0 [libsas] [ 4613.759781] sas_unregister_common_dev+0x4c/0x7a0 [libsas] [ 4613.765962] sas_destruct_devices+0xb8/0x120 [libsas] [ 4613.771709] sas_do_revalidate_domain.constprop.0+0x1b8/0x31c [libsas] [ 4613.778930] sas_revalidate_domain+0x60/0xa4 [libsas] [ 4613.784716] process_one_work+0x248/0x950 [ 4613.789424] worker_thread+0x318/0x934 [ 4613.793878] kthread+0x190/0x200 [ 4613.797810] ret_from_fork+0x10/0x18 [ 4613.802121] INFO: task kworker/u256:4:316722 blocked for more than 120 seconds. [ 4613.816026] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4613.824538] task:kworker/u256:4 state:D stack: 0 pid:316722 ppid: 2 flags:0x00000208 [ 4613.833670] Workqueue: 0000:74:02.0 hisi_sas_rst_work_handler [hisi_sas_main] [ 4613.841491] Call trace: [ 4613.844647] __switch_to+0xf8/0x17c [ 4613.848852] __schedule+0x660/0xee0 [ 4613.853052] schedule+0xac/0x240 [ 4613.856984] schedule_timeout+0x500/0x610 [ 4613.861695] __down+0x128/0x36c [ 4613.865542] down+0x240/0x2d0 [ 4613.869216] hisi_sas_controller_prereset+0x58/0x1fc [hisi_sas_main] [ 4613.876324] hisi_sas_rst_work_handler+0x40/0x8c [hisi_sas_main] [ 4613.883019] process_one_work+0x248/0x950 [ 4613.887732] worker_thread+0x318/0x934 [ 4613.892204] kthread+0x190/0x200 [ 4613.896118] ret_from_fork+0x10/0x18 [ 4613.900423] INFO: task kworker/u256:1:348985 blocked for more than 121 seconds. [ 4613.914341] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4613.922852] task:kworker/u256:1 state:D stack: 0 pid:348985 ppid: 2 flags:0x00000208 [ 4613.931984] Workqueue: 0000:74:02.0_event_q sas_port_event_worker [libsas] [ 4613.939549] Call trace: [ 4613.942702] __switch_to+0xf8/0x17c [ 4613.946892] __schedule+0x660/0xee0 [ 4613.951083] schedule+0xac/0x240 [ 4613.955015] schedule_timeout+0x500/0x610 [ 4613.959725] wait_for_common+0x200/0x610 [ 4613.964349] wait_for_completion+0x3c/0x5c [ 4613.969146] flush_workqueue+0x198/0x790 [ 4613.973776] sas_porte_broadcast_rcvd+0x1e8/0x320 [libsas] [ 4613.979960] sas_port_event_worker+0x54/0xa0 [libsas] [ 4613.985708] process_one_work+0x248/0x950 [ 4613.990420] worker_thread+0x318/0x934 [ 4613.994868] kthread+0x190/0x200 [ 4613.998800] ret_from_fork+0x10/0x18
This is because when the device goes offline, we obtain the hisi_hba semaphore and send the ABORT_DEV command to the device. However, the internal abort timed out due to the 2 bit ECC error and triggers automatic dump. In addition, since the hisi_hba semaphore has been obtained, the dump cannot be executed and the controller cannot be reset.
Therefore, the deadlocks occur on the following circular dependencies ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-sourceUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-symsUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-syms-rtUpgrade dtb-caviumUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt-optional | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-raspiUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1004-gke | Jul 1, 2024 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub