In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
There is a history of deadlock if reboot is performed at the beginning of booting. SDEV_QUIESCE was set for all LU's scsi_devices by UFS shutdown, and at that time the audio driver was waiting on blk_mq_submit_bio() holding a mutex_lock while reading the fw binary. After that, a deadlock issue occurred while audio driver shutdown was waiting for mutex_unlock of blk_mq_submit_bio(). To solve this, set SDEV_OFFLINE for all LUs except WLUN, so that any I/O that comes down after a UFS shutdown will return an error.
[ 31.907781]I[0: swapper/0: 0] 1 130705007 1651079834 11289729804 0 D( 2) 3 ffffff882e208000 * init [device_shutdown] [ 31.907793]I[0: swapper/0: 0] Mutex: 0xffffff8849a2b8b0: owner[0xffffff882e28cb00 kworker/6:0 :49] [ 31.907806]I[0: swapper/0: 0] Call trace: [ 31.907810]I[0: swapper/0: 0] __switch_to+0x174/0x338 [ 31.907819]I[0: swapper/0: 0] __schedule+0x5ec/0x9cc [ 31.907826]I[0: swapper/0: 0] schedule+0x7c/0xe8 [ 31.907834]I[0: swapper/0: 0] schedule_preempt_disabled+0x24/0x40 [ 31.907842]I[0: swapper/0: 0] __mutex_lock+0x408/0xdac [ 31.907849]I[0: swapper/0: 0] __mutex_lock_slowpath+0x14/0x24 [ 31.907858]I[0: swapper/0: 0] mutex_lock+0x40/0xec [ 31.907866]I[0: swapper/0: 0] device_shutdown+0x108/0x280 [ 31.907875]I[0: swapper/0: 0] kernel_restart+0x4c/0x11c [ 31.907883]I[0: swapper/0: 0] __arm64_sys_reboot+0x15c/0x280 [ 31.907890]I[0: swapper/0: 0] invoke_syscall+0x70/0x158 [ 31.907899]I[0: swapper/0: 0] el0_svc_common+0xb4/0xf4 [ 31.907909]I[0: swapper/0: 0] do_el0_svc+0x2c/0xb0 [ 31.907918]I[0: swapper/0: 0] el0_svc+0x34/0xe0 [ 31.907928]I[0: swapper/0: 0] el0t_64_sync_handler+0x68/0xb4 [ 31.907937]I[0: swapper/0: 0] el0t_64_sync+0x1a0/0x1a4
[ 31.908774]I[0: swapper/0: 0] 49 0 11960702 11236868007 0 D( 2) 6 ffffff882e28cb00 * kworker/6:0 [__bio_queue_enter] [ 31.908783]I[0: swapper/0: 0] Call trace: [ 31.908788]I[0: swapper/0: 0] __switch_to+0x174/0x338 [ 31.908796]I[0: swapper/0: 0] __schedule+0x5ec/0x9cc [ 31.908803]I[0: swapper/0: 0] schedule+0x7c/0xe8 [ 31.908811]I[0: swapper/0: 0] __bio_queue_enter+0xb8/0x178 [ 31.908818]I[0: swapper/0: 0] blk_mq_submit_bio+0x194/0x67c [ 31.908827]I[0: swapper/0: 0] __submit_bio+0xb8/0x19c
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 5, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-awsUpgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-56-genericUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k | Feb 20, 2025 | Nov 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub