PT-2024-9789 · Linux+5 · Linux Kernel+5
Syzbot
·
Published
2024-05-16
·
Updated
2025-03-27
·
CVE-2024-38589
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.37
Description:
The vulnerability is related to a possible dead-lock in the
nr rt ioctl() function. It occurs when the nr node list lock is acquired before the nr node lock, leading to a circular locking dependency. This can cause a denial-of-service (DoS) condition. The issue is due to the incorrect ordering of lock acquisitions in the nr rt ioctl() function.Recommendations:
To resolve the issue, update the Linux kernel to version 6.6.37 or later. This version includes the fix for the possible dead-lock in the
nr rt ioctl() function. Ensure that all affected systems are updated to this version or later to prevent potential exploitation of this vulnerability.Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu