In the Linux kernel, the following vulnerability has been resolved:
block: fix deadlock between bd_link_disk_holder and partition scan
'open_mutex' of gendisk is used to protect open/close block devices. But
in bd_link_disk_holder(), it is used to protect the creation of symlink
between holding disk and slave bdev, which introduces some issues.
When bd_link_disk_holder() is called, the driver is usually in the process
of initialization/modification and may suspend submitting io. At this
time, any io hold 'open_mutex', such as scanning partitions, can cause
deadlocks. For example, in raid:
T1 T2
bdev_open_by_dev
lock open_mutex [1]
...
efi_partition
...
md_submit_bio
md_ioctl mddev_syspend
-> suspend all io
md_add_new_disk
bind_rdev_to_array
bd_link_disk_holder
try lock open_mutex [2]
md_handle_request
-> wait mddev_resume
T1 scan partition, T2 add a new device to raid. T1 waits for T2 to resume
mddev, but T2 waits for open_mutex held by T1. Deadlock occurs.
Fix it by introducing a local mutex 'blk_holder_mutex' to replace
'open_mutex'.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 09:03
Type | Values Removed | Values Added |
---|---|---|
References | () https://git.kernel.org/stable/c/03f12122b20b6e6028e9ed69030a49f9cffcbb75 - Patch | |
References | () https://git.kernel.org/stable/c/1e5c5b0abaee7b62a10b9707a62083b71ad21f62 - Patch | |
References | () https://git.kernel.org/stable/c/5a87c1f7993bc8ac358a3766bac5dc7126e01e98 - Patch |
29 Apr 2024, 19:34
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-667 | |
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
References | () https://git.kernel.org/stable/c/03f12122b20b6e6028e9ed69030a49f9cffcbb75 - Patch | |
References | () https://git.kernel.org/stable/c/1e5c5b0abaee7b62a10b9707a62083b71ad21f62 - Patch | |
References | () https://git.kernel.org/stable/c/5a87c1f7993bc8ac358a3766bac5dc7126e01e98 - Patch | |
First Time |
Linux
Linux linux Kernel |
|
CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
17 Apr 2024, 11:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-17 11:15
Updated : 2024-11-21 09:03
NVD link : CVE-2024-26899
Mitre link : CVE-2024-26899
CVE.ORG link : CVE-2024-26899
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-667
Improper Locking