PT-2024-29181 · Linux+7 · Linux Kernel+7
Syzbot
·
Published
2024-04-23
·
Updated
2026-05-26
·
CVE-2024-40966
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises from the
con write() routine violating the "writes cannot sleep" rule that some line disciplines (ldiscs) rely on. This occurs when N GSM is attached to a virtual console, and gsmld write() calls con write() while holding a spinlock, causing con write() to attempt to acquire the console lock. This results in a sleeping function being called from an invalid context, leading to a bug at kernel/printk/printk.c:2659. The solution involves adding an option for a tty to reject a new ldisc and limiting virtual terminals to just N TTY.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu