CVE-2024-44953
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/09/2024
Last modified:
07/03/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
scsi: ufs: core: Fix deadlock during RTC update<br />
<br />
There is a deadlock when runtime suspend waits for the flush of RTC work,<br />
and the RTC work calls ufshcd_rpm_get_sync() to wait for runtime resume.<br />
<br />
Here is deadlock backtrace:<br />
<br />
kworker/0:1 D 4892.876354 10 10971 4859 0x4208060 0x8 10 0 120 670730152367<br />
ptr f0ffff80c2e40000 0 1 0x00000001 0x000000ff 0x000000ff 0x000000ff<br />
__switch_to+0x1a8/0x2d4<br />
__schedule+0x684/0xa98<br />
schedule+0x48/0xc8<br />
schedule_timeout+0x48/0x170<br />
do_wait_for_common+0x108/0x1b0<br />
wait_for_completion+0x44/0x60<br />
__flush_work+0x39c/0x424<br />
__cancel_work_sync+0xd8/0x208<br />
cancel_delayed_work_sync+0x14/0x28<br />
__ufshcd_wl_suspend+0x19c/0x480<br />
ufshcd_wl_runtime_suspend+0x3c/0x1d4<br />
scsi_runtime_suspend+0x78/0xc8<br />
__rpm_callback+0x94/0x3e0<br />
rpm_suspend+0x2d4/0x65c<br />
__pm_runtime_suspend+0x80/0x114<br />
scsi_runtime_idle+0x38/0x6c<br />
rpm_idle+0x264/0x338<br />
__pm_runtime_idle+0x80/0x110<br />
ufshcd_rtc_work+0x128/0x1e4<br />
process_one_work+0x26c/0x650<br />
worker_thread+0x260/0x3d8<br />
kthread+0x110/0x134<br />
ret_from_fork+0x10/0x20<br />
<br />
Skip updating RTC if RPM state is not RPM_ACTIVE.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.8 (including) | 6.10.5 (excluding) |
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page