CVE-2024-55642

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

block: Prevent potential deadlocks in zone write plug error recovery

Zone write plugging for handling writes to zones of a zoned block

device always execute a zone report whenever a write BIO to a zone

fails. The intent of this is to ensure that the tracking of a zone write

pointer is always correct to ensure that the alignment to a zone write

pointer of write BIOs can be checked on submission and that we can

always correctly emulate zone append operations using regular write

BIOs.

However, this error recovery scheme introduces a potential deadlock if a

device queue freeze is initiated while BIOs are still plugged in a zone

write plug and one of these write operation fails. In such case, the

disk zone write plug error recovery work is scheduled and executes a

report zone. This in turn can result in a request allocation in the

underlying driver to issue the report zones command to the device. But

with the device queu

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References