In the Linux kernel, the following vulnerability has been resolved:
ALSA: Fix deadlocks with kctl removals at disconnection
In snd_card_disconnect(), we set card->shutdown flag at the beginning, call callbacks and do sync for card->power_ref_sleep waiters at the end. The callback may delete a kctl element, and this can lead to a deadlock when the device was in the suspended state. Namely:
* A process waits for the power up at snd_power_ref_and_wait() in snd_ctl_info() or read/write() inside card->controls_rwsem.
* The system gets disconnected meanwhile, and the driver tries to delete a kctl via snd_ctl_remove*(); it tries to take card->controls_rwsem again, but this is already locked by the above. Since the sleeper isn't woken up, this deadlocks.
An easy fix is to wake up sleepers before processing the driver disconnect callbacks but right after setting the card->shutdown flag. Then all sleepers will abort immediately, and the code flows again.
So, basically this patch moves the wait_event() call at the right timing. While we're at it, just to be sure, call wait_event_all() instead of wait_event(), although we don't use exclusive events on this queue for now.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade kernel-rtUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-source-azure | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.15.0-1070-azure | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub