PT-2024-11378 · Linux+2 · Linux Kernel+2
Alexandra Winter
·
Published
2021-09-21
·
Updated
2026-03-14
·
CVE-2021-47382
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a deadlock during failing recovery in the s390/qeth component of the Linux kernel. A commit removed the taking of
discipline mutex inside qeth do reset(), fixing potential deadlocks. However, an error path was missed, which still takes discipline mutex and thus has the original deadlock potential. Intermittent deadlocks were seen when a qeth channel path is configured offline, causing a race between qeth do reset and ccwgroup remove. To fix this, qeth set offline() is called directly in the qeth do reset() error case, and a new variant of ccwgroup set offline() is used, without taking discipline mutex.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Race Condition
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linux Kernel
Suse