PT-2024-29217 · Linux+7 · Linux Kernel+7
Ronald Wahl
·
Published
2024-07-06
·
Updated
2026-05-26
·
CVE-2024-41036
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A deadlock vulnerability has been resolved in the Linux kernel, specifically in the net: ks8851 module. The issue occurs when SMP is enabled and spinlocks are functional, causing a deadlock with the 'statelock' spinlock between
ks8851 start xmit spi and ks8851 irq. This results in a soft lockup, with the CPU stuck for 27 seconds. The problem was not identified earlier because tests were done on a device with SMP disabled, making spinlocks ineffective. To avoid the deadlock, spin (un)lock bh is now used for TX queue related locking to prevent synchronous execution of softirq work.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu