Suppressing Partition Scanning to Avoid Deadlocks
CVE-2024-53093

5.5MEDIUM

Key Information:

Vendor
Linux
Status
Linux
Vendor
CVE Published:
21 November 2024

Badges

📰 News Worthy

Summary

In the Linux kernel, the following vulnerability has been resolved:

nvme-multipath: defer partition scanning

We need to suppress the partition scan from occuring within the controller's scan_work context. If a path error occurs here, the IO will wait until a path becomes available or all paths are torn down, but that action also occurs within scan_work, so it would deadlock. Defer the partion scan to a different context that does not block scan_work.

Affected Version(s)

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 60de2e03f984cfbcdc12fa552f95087c35a05a98

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4a57f42e5ed42cb8f1beb262c4f6d3e698939e4e

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

News Articles

favicon imageCyber Security News

Multiple Linux Kernel Vulnerabilities In Defer Partition Scanning Patched

The Linux kernel development team has recently addressed two significant vulnerabilities affecting various versions of the Linux operating system.

References

https://git.kernel.org/stable/c/60de2e03f984cfbcdc12fa552...
https://git.kernel.org/stable/c/4a57f42e5ed42cb8f1beb262c...
https://git.kernel.org/stable/c/a91b7eddf45afeeb9c5ece11d...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📰

    First article discovered by Cyber Security News

  • Vulnerability published

.