CVSS 5.5 · Medium EPSS 0,21%
Kerentanan Improper Locking pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: drivers: usb: host: Fix deadlock in oxu_bus_suspend() There is a deadlock in oxu_bus_suspend(), which is shown below: (Thread 1) | (Thread 2) | timer_action() oxu_bus_suspend() | mod_timer() spin_lock_irq() //(1) | (wait a time) ... | oxu_watchdog() del_timer_sync() | spin_lock_irq() //(2) (wait timer to stop) | ... We hold oxu->lock in position (1) of thread 1, and use del_timer_sync() to wait timer to stop, but timer handler also need oxu->lock in position (2) of thread 2. As a result, oxu_bus_suspend() will block forever. This patch extracts del_timer_sync() from the protection of spin_lock_irq(), which could let timer handler to obtain the needed lock.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Semua versi sebelum 4.9.318 |
| linux | linux kernel | Versi 4.10 hingga sebelum 4.14.283 |
| linux | linux kernel | Versi 4.15 hingga sebelum 4.19.247 |
| linux | linux kernel | Versi 4.20 hingga sebelum 5.4.198 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.122 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.47 |
| linux | linux kernel | Versi 5.16 hingga sebelum 5.17.15 |
| linux | linux kernel | Versi 5.18 hingga sebelum 5.18.4 |