In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
There is a history of deadlock if reboot is performed at the beginning of booting. SDEV_QUIESCE was set for all LU's scsi_devices by UFS shutdown, and at that time the audio driver was waiting on blk_mq_submit_bio() holding a mutex_lock while reading the fw binary. After that, a deadlock issue occurred while audio driver shutdown was waiting for mutex_unlock of blk_mq_submit_bio(). To solve this, set SDEV_OFFLINE for all LUs except WLUN, so that any I/O that comes down after a UFS shutdown will return an error.
[ 31.907781]I[0: swapper/0: 0] 1 130705007 1651079834 11289729804 0 D( 2) 3 ffffff882e208000 * init [device_shutdown] [ 31.907793]I[0: swapper/0: 0] Mutex: 0xffffff8849a2b8b0: owner[0xffffff882e28cb00 kworker/6:0 :49] [ 31.907806]I[0: swapper/0: 0] Call trace: [ 31.907810]I[0: swapper/0: 0] __switch_to+0x174/0x338 [ 31.907819]I[0: swapper/0: 0] __schedule+0x5ec/0x9cc [ 31.907826]I[0: swapper/0: 0] schedule+0x7c/0xe8 [ 31.907834]I[0: swapper/0: 0] schedule_preempt_disabled+0x24/0x40 [ 31.907842]I[0: swapper/0: 0] __mutex_lock+0x408/0xdac [ 31.907849]I[0: swapper/0: 0] __mutex_lock_slowpath+0x14/0x24 [ 31.907858]I[0: swapper/0: 0] mutex_lock+0x40/0xec [ 31.907866]I[0: swapper/0: 0] device_shutdown+0x108/0x280 [ 31.907875]I[0: swapper/0: 0] kernel_restart+0x4c/0x11c [ 31.907883]I[0: swapper/0: 0] __arm64_sys_reboot+0x15c/0x280 [ 31.907890]I[0: swapper/0: 0] invoke_syscall+0x70/0x158 [ 31.907899]I[0: swapper/0: 0] el0_svc_common+0xb4/0xf4 [ 31.907909]I[0: swapper/0: 0] do_el0_svc+0x2c/0xb0 [ 31.907918]I[0: swapper/0: 0] el0_svc+0x34/0xe0 [ 31.907928]I[0: swapper/0: 0] el0t_64_sync_handler+0x68/0xb4 [ 31.907937]I[0: swapper/0: 0] el0t_64_sync+0x1a0/0x1a4
[ 31.908774]I[0: swapper/0: 0] 49 0 11960702 11236868007 0 D( 2) 6 ffffff882e28cb00 * kworker/6:0 [__bio_queue_enter] [ 31.908783]I[0: swapper/0: 0] Call trace: [ 31.908788]I[0: swapper/0: 0] __switch_to+0x174/0x338 [ 31.908796]I[0: swapper/0: 0] __schedule+0x5ec/0x9cc [ 31.908803]I[0: swapper/0: 0] schedule+0x7c/0xe8 [ 31.908811]I[0: swapper/0: 0] __bio_queue_enter+0xb8/0x178 [ 31.908818]I[0: swapper/0: 0] blk_mq_submit_bio+0x194/0x67c [ 31.908827]I[0: swapper/0: 0] __submit_bio+0xb8/0x19c
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 5, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-gkeUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1005-realtime | Feb 20, 2025 | Nov 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub