Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Maksim Kiselev

#46295of 53,638
5.5Total CVSS
Vulnerabilities · 1
PT-2024-21510
5.5
2024-01-24
Linux · Linux Kernel · CVE-2024-26775
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a potential deadlock at `set capacity` in the Linux kernel. This occurs due to an interrupt unsafe locking scenario where `aoeblk gdalloc()` holds `&d->lock` and attempts to acquire `&bdev->bd size lock` at the `set capacity()` call, while `zram add()->set capacity()` holds `&bdev->bd size lock`. To avoid this deadlock, the solution is to move `set capacity()` outside of the section protected by `(&d->lock)`, thus breaking the lock dependency. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.