PT-2024-7295 · Linux+10 · Linux Kernel+10
Published
2024-02-01
·
Updated
2026-03-14
·
CVE-2024-26769
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a deadlock in the nvmet-fc component of the Linux kernel. When deleting an association, the shutdown path is deadlocking because it tries to flush the nvmet wq nested. This can be avoided by deferring the put work into its own work item. The vulnerability is associated with incorrect locking in functions such as
nvmet fc tgt a get(), nvmet fc finish ls req(), and nvmet fc register targetport() in drivers/nvme/target/fc.c. Exploitation of this vulnerability may allow an attacker to cause a denial of service.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu