PT-2024-21490 · Linux+1 · Linux Kernel+1
Published
2024-02-08
·
Updated
2025-09-29
·
CVE-2024-26725
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0-rc2jiri+
Description
The issue is related to a possible deadlock during netlink dump operation. The
netlink dump start() function calls control->start(cb) with nlk->cb mutex held, and in control->start(cb), the dpll lock is taken. Then, nlk->cb mutex is released and taken again in netlink dump(), while dpll lock is still being held. This leads to an ABBA deadlock when another CPU races with the same operation.Recommendations
To resolve the issue, move the
dpll lock taking into the dumpit() callback, which ensures the correct lock-taking order. This fix is applicable to all affected versions of the Linux kernel prior to 6.8.0-rc2jiri+.As a temporary workaround, consider disabling the
dpll lock dumpit() function until a patch is available. However, this may have unintended consequences and should be used with caution.At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat