CVE-2024-26605

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

PCI/ASPM: Fix deadlock when enabling ASPM

A last minute revert in 6.7-final introduced a potential deadlock when

enabling ASPM during probe of Qualcomm PCIe controllers as reported by

lockdep:

============================================

WARNING: possible recursive locking detected

6.7.0 #40 Not tainted

--------------------------------------------

kworker/u16:5/90 is trying to acquire lock:

ffffacfa78ced000 (pci_bus_sem){++++}-{3:3}, at: pcie_aspm_pm_state_change+0x58/0xdc

but task is already holding lock:

ffffacfa78ced000 (pci_bus_sem){++++}-{3:3}, at: pci_walk_bus+0x34/0xbc

other info that might help us debug this:

Possible unsafe locking scenario:

CPU0

----

lock(pci_bus_sem);

lock(pci_bus_sem);

*** DEADLOCK ***

Call trace:

print_deadlock_bug+0x25c/0x348

__lock_acquire+0x10a4/0x2064

lock_acquire+0x1e8/0x318

dow

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References