PT-2024-31321 · Linux+2 · Linux Kernel+2

Peter Wang

·

Published

2024-07-15

·

Updated

2025-01-09

·

CVE-2024-44953

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock occurs when runtime suspend waits for the flush of RTC work, and the RTC work calls ufshcd rpm get sync() to wait for runtime resume. This issue is resolved by skipping the update of the Real-Time Clock (RTC) if the RPM state is not RPM ACTIVE. The deadlock backtrace involves several functions, including switch to(), schedule(), schedule(), schedule timeout(), do wait for common(), wait for completion(), flush work(), cancel work sync(), cancel delayed work sync(), ufshcd wl suspend(), ufshcd wl runtime suspend(), scsi runtime suspend(), rpm callback(), rpm suspend(), pm runtime suspend(), scsi runtime idle(), rpm idle(), pm runtime idle(), ufshcd rtc work(), process one work(), worker thread(), kthread(), and ret from fork().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-03172
CVE-2024-44953
USN-7154-1
USN-7154-2
USN-7155-1
USN-7156-1
USN-7196-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu