CVE-2024-57807 – Linux Kernel; Possible Circular Locking Dependency Detected in MegaRAID SAS Driver

The following table lists the changes that have been made to the
CVE-2024-57807 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jan. 11, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    scsi: megaraid_sas: Fix for a potential deadlock

    This fixes a ‘possible circular locking dependency detected’ warning
    CPU0 CPU1
    —- —-
    lock(&instance->reset_mutex);
    lock(&shost->scan_mutex);
    lock(&instance->reset_mutex);
    lock(&shost->scan_mutex);

    Fix this by temporarily releasing the reset_mutex.

    Added Reference https://git.kernel.org/stable/c/3c654998a3e8167a58b6c6fede545fe400a4b554
    Added Reference https://git.kernel.org/stable/c/466ca39dbf5d0ba71c16b15c27478a9c7d4022a8
    Added Reference https://git.kernel.org/stable/c/50740f4dc78b41dec7c8e39772619d5ba841ddd7
    Added Reference https://git.kernel.org/stable/c/78afb9bfad00c4aa58a424111d7edbcab9452f2b
    Added Reference https://git.kernel.org/stable/c/edadc693bfcc0f1ea08b8fa041c9361fd042410d
    Added Reference https://git.kernel.org/stable/c/f36d024bd15ed356a80dda3ddc46d0a62aa55815
    Added Reference https://git.kernel.org/stable/c/f50783148ec98a1d38b87422e2ceaf2380b7b606
Share the Post:

Related Posts