PT-2024-36896 · Linux+6 · Linux Kernel+6
Published
2024-12-27
·
Updated
2025-05-26
·
CVE-2024-56589
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
The issue arises in the hisi sas driver when both the hardware interrupt handler and the interrupt thread are executed on the same CPU, leading to a soft lockup. This occurs when an expander is connected to 12 high-performance SAS SSDs, causing the CPU to be continuously consumed and unable to run the watchdog thread. As a result, a call trace occurs when the watchdog time exceeds the specified time.
Recommendations
To resolve the issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider adding cond resched() to execute the watchdog thread. Restrict access to the hisi sas driver to minimize the risk of exploitation until the issue is resolved.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu