PT-2024-7858 · Linux+5 · Linux Kernel+5
Dave Wysochanski
+4
·
Published
2024-03-09
·
Updated
2025-03-28
·
CVE-2024-27031
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.7.0
Description
The vulnerability is related to the NFS component of the Linux kernel. It is caused by incorrect locking in the
nfs netfs issue read() function, which can lead to a deadlock when interrupts are not disabled while iterating through pages in the xarray to submit for NFS read. This issue can be reproduced with a specific test and may cause inconsistent lock state warnings on a lockdep-enabled kernel. The problem can occur when another page in the mapping is processed for writeback inside an interrupt, leading to a potential deadlock.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the
nfs netfs issue read() xarray locking for writeback interrupt. As a temporary workaround, consider disabling the nfs netfs issue read() function until a patch is available. However, this may have performance implications and should be carefully evaluated before implementation.Note: The provided information does not specify the exact fixed version, so it is recommended to update to the latest available kernel version to ensure the inclusion of the necessary fix.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu