PT-2024-27214 · Linux+10 · Linux Kernel+10

Published 2024-03-05 · Updated 2026-05-26 · CVE-2024-36924

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel, specifically with the scsi: lpfc module. The lpfc worker wake up() function calls the lpfc work done() routine, which takes the hbalock. To avoid potential deadlock, lpfc worker wake up() should not be called while holding the hbalock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Locking

Weakness Enumeration

CWE-833

CWE-667

Related Identifiers

ALSA-2024:4928

ALSA-2025_16880

AZL-55404

BDU:2025-03052

CESA-2024_5101

CVE-2024-36924

INFSA-2024_4928

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-1705

OESA-2024-1706

OESA-2024-1707

OESA-2024-1863

OPENSUSE-SU-2024_2947-1

RHSA-2024:4823

RHSA-2024:4831

RHSA-2024:4902

RHSA-2024:4928

RHSA-2024:5101

RHSA-2024:8107

RHSA-2024_4928

RHSA-2024_5101

RLSA-2024:4928

RXSA-2024:4928

SUSE-SU-2024:2008-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2190-1

SUSE-SU-2024:2571-1

SUSE-SU-2024:2892-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2940-1

SUSE-SU-2024:2947-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6949-1

USN-6949-2

USN-6952-1

USN-6952-2

USN-6955-1

Affected Products

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 3465

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36924.json · Exploit
• https://ubuntu.com/security/CVE-2024-36003 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36962 · Vendor Advisory
• https://git.kernel.org/stable/c/ee833d7e62de2b84ed1332d501b67f12e7e5678f · Patch
• https://ubuntu.com/security/CVE-2024-38590 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27399 · Security Note
• https://osv.dev/vulnerability/USN-6949-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35886 · Security Note
• https://ubuntu.com/security/CVE-2024-36904 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35855 · Security Note
• https://ubuntu.com/security/CVE-2024-38599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47538 · Security Note
• https://ubuntu.com/security/CVE-2024-38583 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36906 · Security Note