scsi：恢复“scsi：fcoe：修复 &fip->ctlr_lock 上的潜在死锁”(CVE-2024-26917)

CVE编号

CVE-2024-26917

利用情况

暂无

补丁情况

N/A

披露时间

2024-04-18
漏洞描述
In the Linux kernel, the following vulnerability has been resolved:

scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"

This reverts commit 1a1975551943f681772720f639ff42fbaa746212.

This commit causes interrupts to be lost for FCoE devices, since it changed
sping locks from "bh" to "irqsave".

Instead, a work queue should be used, and will be addressed in a separate
commit.
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
https://git.kernel.org/stable/c/2209fc6e3d7727d787dc6ef9baa1e9eae6b1295b
https://git.kernel.org/stable/c/25675159040bffc7992d5163f3f33ba7d0142f21
https://git.kernel.org/stable/c/2996c7e97ea7cf4c1838a1b1dbc0885934113783
https://git.kernel.org/stable/c/5b8f473c4de95c056c1c767b1ad48c191544f6a5
https://git.kernel.org/stable/c/6bb22ac1d11d7d20f91e7fd2e657a9e5f6db65e0
https://git.kernel.org/stable/c/7d4e19f7ff644c5b79e8271df8ac2e549b436a5b
https://git.kernel.org/stable/c/94a600226b6d0ef065ee84024b450b566c5a87d6
https://git.kernel.org/stable/c/977fe773dcc7098d8eaf4ee6382cb51e13e784cb
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 debian_12 linux * Up to
(excluding)
6.1.82-1
CVSS3评分
N/A
  • 攻击路径
    N/A
  • 攻击复杂度
    N/A
  • 权限要求
    N/A
  • 影响范围
    N/A
  • 用户交互
    N/A
  • 可用性
    N/A
  • 保密性
    N/A
  • 完整性
    N/A
N/A
CWE-ID 漏洞类型
阿里云安全产品覆盖情况